CVE-2021-26762: Phpgurukul Student Record System

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php.

Affected products

• Phpgurukul Student Record System: version 4.0 only

Published 2021-07-22. Last modified 2026-06-17.