CVE-2021-28423: Phpgurukul Teachers Record Management System

High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php.

Affected products

• Phpgurukul Teachers Record Management System: version 1.0 only

Published 2021-07-01. Last modified 2026-06-17.