Student Record System

Vendor:

First CVE: Jul 22, 2021 · Active for 5 years

29
Total CVEs
More Total CVEs than 97% of tracked products
7.3
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 72% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Student Record System over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jul 22, 2021
5 years ago
Most Recent CVE
Mar 2, 2026
147 days ago

CVE Severity & Scoring

Student Record System29 CVEs
All CVEs352,785 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network29 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low29 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None25 (86.2%)
Unknown0 (0.0%)
Required4 (13.8%)
Privileges Required
Low9 (31.0%)
High2 (6.9%)
None18 (62.1%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (29 CVEs).

29 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-26765CRITICAL
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php.
Jul 22, 20219.830NONO
CVE-2025-5216CRITICAL
A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The manipulation of the a
May 27, 20259.829NONO
CVE-2025-4108CRITICAL
A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /add-subject.php. The manipulatio
Apr 30, 20259.829NONO
CVE-2025-1902CRITICAL
A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The
Mar 4, 20259.828NONO
CVE-2025-4112CRITICAL
A vulnerability was found in PHPGurukul Student Record System 3.20. It has been declared as critical. This vulnerability affects unknown code of the file /add-course.php. The manip
Apr 30, 20259.827NONO
CVE-2021-26764HIGH
SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php.
Jul 22, 20218.827NONO
CVE-2021-26762HIGH
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php.
Jul 22, 20218.827NONO
CVE-2024-3769CRITICAL
A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /login.php. The manipulation of t
Apr 15, 20249.826NONO
CVE-2024-3770CRITICAL
A vulnerability has been found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage-c
Apr 15, 20249.825NONO
CVE-2025-63955HIGH
A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated adminis
Nov 18, 20257.524NONO
View all 29 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (29 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (29 CVEs).

Media Mentions

Signals from CVEs in this product scope (29 CVEs).

Top CNAs Publishing CVEs For Student Record System

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
4.039.12.6%00
3.20167.90.4%00
3.288.80.3%00
1.024.80.2%00