CVE-2021-26765: Phpgurukul Student Record System

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php.

Affected products

• Phpgurukul Student Record System: version 4.0 only

Published 2021-07-22. Last modified 2026-06-17.