CVE-2021-44966: Phpgurukul Employee Record Management System

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.

Affected products

• Phpgurukul Employee Record Management System: version 1.2 only

Published 2021-12-13. Last modified 2026-06-17.