CVE-2024-27685

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27685
SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables.
CVSS

No CVSS.

References
Link Resource
https://medium.com/@cnetsec/a-sql-injection-vulnerability-exists-in-the-student-record-system-using-php-and-mysql-v3-20-df2c6fe7dc15 Third Party Advisory
https://phpgurukul.com/student-record-system-php/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*
History

02 Jul 2025, 16:16

Type Values Removed Values Added
First Time Phpgurukul student Record System
Phpgurukul
CPE cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*
References () https://medium.com/@cnetsec/a-sql-injection-vulnerability-exists-in-the-student-record-system-using-php-and-mysql-v3-20-df2c6fe7dc15 - () https://medium.com/@cnetsec/a-sql-injection-vulnerability-exists-in-the-student-record-system-using-php-and-mysql-v3-20-df2c6fe7dc15 - Third Party Advisory
References () https://phpgurukul.com/student-record-system-php/ - () https://phpgurukul.com/student-record-system-php/ - Product

25 Jun 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-25 15:15

Updated : 2025-07-02 16:16

NVD link : CVE-2024-27685

Mitre link : CVE-2024-27685

JSON object : View

Products Affected

phpgurukul

  • student_record_system
CWE

No CWE.