CVE-2025-4108: fallo de gravedad media en PHPGurukul Student Record System
PHPGurukul Student Record System add-subject.php sql injection
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /add-subject.php. The manipulation of the argument sub1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
PHPGurukul · Student Record SystemCVEs relacionadas — PHPGurukul Student Record System
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-3769HIGHPHPGurukul Student Record System login.php sql injectionEPSS 0.9%CVE-2024-3770MEDIUMPHPGurukul Student Record System sql injectionEPSS 0.8%CVE-2024-3771MEDIUMPHPGurukul Student Record System edit-subject.php sql injectionEPSS 0.8%CVE-2025-4073MEDIUMPHPGurukul Student Record System change-password.php sql injectionEPSS 0.6%CVE-2025-5216MEDIUMPHPGurukul Student Record System login.php sql injectionEPSS 0.6%CVE-2025-1902MEDIUMPHPGurukul Student Record System password-recovery.php sql injectionEPSS 0.6%