CVE-2026-0547: medium-severity vulnerability in PHPGurukul Online Course Registration
PHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.4%
A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be launched remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
PHPGurukul · Online Course RegistrationRelated CVEs — PHPGurukul Online Course Registration
In the same product, most dangerous first.
CVE-2025-4793MEDIUMPHPGurukul Online Course Registration edit-student-profile.php sql injectionEPSS 0.8%CVE-2025-4794MEDIUMPHPGurukul Online Course Registration news.php sql injectionEPSS 0.6%CVE-2025-4772MEDIUMPHPGurukul Online Course Registration department.php sql injectionEPSS 0.6%CVE-2025-4773MEDIUMPHPGurukul Online Course Registration level.php sql injectionEPSS 0.6%CVE-2025-4771MEDIUMPHPGurukul Online Course Registration course.php sql injectionEPSS 0.6%CVE-2025-15406MEDIUMPHPGurukul Online Course Registration authorizationEPSS 0.5%