CVE-2024-5065: medium-severity vulnerability in PHPGurukul Online Course Registration System
PHPGurukul Online Course Registration System sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.7%
A vulnerability classified as critical has been found in PHPGurukul Online Course Registration System 3.1. Affected is an unknown function of the file /onlinecourse/. The manipulation of the argument regno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264924.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
PHPGurukul · Online Course Registration SystemRelated CVEs — PHPGurukul Online Course Registration System
In the same product, most dangerous first.
CVE-2024-5064MEDIUMPHPGurukul Online Course Registration System news-details.php sql injectionEPSS 0.7%CVE-2024-5063MEDIUMPHPGurukul Online Course Registration System index.php sql injectionEPSS 0.7%CVE-2024-5066MEDIUMPHPGurukul Online Course Registration System pincode-verification.php sql injectionEPSS 0.6%CVE-2026-0803MEDIUMPHPGurukul Online Course Registration System enroll.php sql injectionEPSS 0.4%CVE-2026-0733MEDIUMPHPGurukul Online Course Registration System manage-students.php sql injectionEPSS 0.4%