SQL Injection Vulnerability in PHPGurukul Student Record Management System
CVE-2024-55016
Currently unrated
Key Information:
- Vendor
PHPGurukul
- Vendor
- CVE Published:
- 14 November 2025
What is CVE-2024-55016?
The PHPGurukul Student Record Management System version 3.20 is susceptible to SQL Injection attacks through the 'id' and 'password' parameters in the login.php file. This vulnerability allows malicious actors to manipulate SQL queries, potentially gaining unauthorized access and compromising sensitive user data. Security measures should be implemented to sanitize inputs and protect against such attacks to ensure the integrity of user information and prevent data breaches.