Phpgurukul Online Course Registration vulnerabilities

16 CVEs affecting Phpgurukul Online Course Registration, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5814, published 2026-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-12429, published 2020-04-28. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php,…
CVE-2025-4793, published 2025-05-16. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been classified as critical. Affected is an unknown function of the file /edit-student-profile.php. The manipulation of…
CVE-2025-4794, published 2025-05-16. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /news.php. The…
CVE-2025-4772, published 2025-05-16. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/department.php.…
CVE-2025-4773, published 2025-05-16. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/level.php. The manipulation…
CVE-2025-4771, published 2025-05-16. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/course.php. The manipulation of the…
CVE-2025-15406, published 2026-01-01. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is…
CVE-2025-10663, published 2025-09-18. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation of the argument cgpa results in sql…
CVE-2025-10025, published 2025-09-05. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql…
CVE-2025-9307, published 2025-08-21. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw has been found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /admin/session.php. This manipulation of the argument sesssion causes sql injection.…

Latest

CVE-2026-5814, published 2026-04-09. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1. This issue affects some unknown processing of the file /admin/check_availability.php. The manipulation of the…
CVE-2026-5813, published 2026-04-08. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /check_availability.php. Executing a manipulation of the argument cid…
CVE-2025-70899, published 2026-01-22. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on all administrative forms. An attacker can perform unauthorized actions on behalf of authenticated…
CVE-2026-0547, published 2026-01-02. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student…
CVE-2025-9729, published 2025-08-31. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php. Performing manipulation of the argument…
CVE-2025-50485, published 2025-07-28. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack.