High · 7.1 CVE-2024-27685 EUVD-2024-24879GHSA-vf43-pv4r-m86j

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information vi…

Published Jun 25, 2025 · Updated Jun 25, 2025 · Assigned by mitre

Description

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables.

References

https://phpgurukul.com/student-record-system-php/
https://medium.com/@cnetsec/a-sql-injection-vulnerability-exists-in-the-student-record-system-using-php-and-mysql-v3-20-df2c6fe7dc15