Phpgurukul Teachers Record Management System vulnerabilities

9 CVEs affecting Phpgurukul Teachers Record Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8951, published 2025-08-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-26822, published 2021-02-15. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote…
CVE-2021-28423, published 2021-07-01. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in…
CVE-2021-28424, published 2021-07-01. Medium severity, CVSS 5.4. EPSS: 1.3% chance of exploitation in the next 30 days. A stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated users to inject arbitrary web script or HTML via the 'email' POST parameter in…
CVE-2024-51064, published 2024-10-31. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php.
CVE-2024-51063, published 2024-10-31. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter.
CVE-2025-6888, published 2025-06-30. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Teachers Record Management System 2.1. It has been classified as critical. This affects an unknown part of the file /admin/changeimage.php. The manipulation of…
CVE-2025-6885, published 2025-06-30. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /admin/edit-teacher-detail.php. The…
CVE-2024-48744, published 2024-10-16. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A Reflected Cross Site Scripting (XSS) vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Record Management System v2.1, which allows remote attackers to execute arbitrary…
CVE-2025-8951, published 2025-08-14. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to…