CVE-2024-5066: medium-severity vulnerability in PHPGurukul Online Course Registration System
PHPGurukul Online Course Registration System pincode-verification.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.6%
A vulnerability classified as critical was found in PHPGurukul Online Course Registration System 3.1. Affected by this vulnerability is an unknown functionality of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264925 was assigned to this vulnerability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
PHPGurukul · Online Course Registration SystemRelated CVEs — PHPGurukul Online Course Registration System
In the same product, most dangerous first.
CVE-2024-5064MEDIUMPHPGurukul Online Course Registration System news-details.php sql injectionEPSS 0.7%CVE-2024-5063MEDIUMPHPGurukul Online Course Registration System index.php sql injectionEPSS 0.7%CVE-2024-5065MEDIUMPHPGurukul Online Course Registration System sql injectionEPSS 0.7%CVE-2026-0803MEDIUMPHPGurukul Online Course Registration System enroll.php sql injectionEPSS 0.4%CVE-2026-0733MEDIUMPHPGurukul Online Course Registration System manage-students.php sql injectionEPSS 0.4%