PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php.

Published Nov 14, 2025 · Updated Nov 14, 2025 · Assigned by mitre