CVE-2025-4771: fallo de gravedad media en PHPGurukul Online Course Registration
PHPGurukul Online Course Registration course.php sql injection
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/course.php. The manipulation of the argument coursecode leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
PHPGurukul · Online Course RegistrationCVEs relacionadas — PHPGurukul Online Course Registration
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-4793MEDIUMPHPGurukul Online Course Registration edit-student-profile.php sql injectionEPSS 0.8%CVE-2025-4794MEDIUMPHPGurukul Online Course Registration news.php sql injectionEPSS 0.6%CVE-2025-4772MEDIUMPHPGurukul Online Course Registration department.php sql injectionEPSS 0.6%CVE-2025-4773MEDIUMPHPGurukul Online Course Registration level.php sql injectionEPSS 0.6%CVE-2025-15406MEDIUMPHPGurukul Online Course Registration authorizationEPSS 0.5%CVE-2025-9307MEDIUMPHPGurukul Online Course Registration session.php sql injectionEPSS 0.4%