Phpgurukul Student Result Management System vulnerabilities

8 CVEs affecting Phpgurukul Student Result Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-56710, published 2025-09-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-48722, published 2023-12-21. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_results.php resource does not validate the…
CVE-2023-48720, published 2023-12-21. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters…
CVE-2023-48718, published 2023-12-21. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_students.php resource does not validate the…
CVE-2025-7534, published 2025-07-13. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Student Result Management System 2.0. It has been classified as critical. Affected is an unknown function of the file /notice-details.php of the component GET…
CVE-2025-50489, published 2025-07-28. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.
CVE-2025-5599, published 2025-06-04. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the…
CVE-2025-50490, published 2025-07-28. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.
CVE-2025-56710, published 2025-09-15. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick…