CVE-2026-82424
PHPGurukul Student Information System student_edit1.php sql injection
- State
- Published
- Severity
- 5.3 Medium
- Published
- Aug 29, 2026
- Updated
- Aug 31, 2026
- Reserved
- Aug 29, 2026
Description
A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_edit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Student Information SystemPHPGurukul |
|
References
- VDB-397013 | PHPGurukul Student Information System student_edit1.php sql injectionvdb-entrytechnical-description
- VDB-397013 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- CVE-2026-82424 | CVE Analysis and Reportthird-party-advisory
- Submit #887957 | phpgurukul.com phpgurukul User Registration & Login and User Management System With admin panel V1.0 SQL Injection Vulnerabilitythird-party-advisory
- Submit #887958 | phpgurukul.com phpgurukul User Registration & Login and User Management System With admin panel V1.0 SQL Injection Vulnerability (Duplicate)third-party-advisory
- Submit #887959 | phpgurukul.com phpgurukul User Registration & Login and User Management System With admin panel V1.0 SQL Injection Vulnerability (Duplicate)third-party-advisory
- https://github.com/Bai-public/CVE/issues/8exploitissue-tracking
- https://phpgurukul.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.