CVE-2021-26762: SQL Injection
Published Jul 22, 2021
·Updated
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php.
Affected Software
2 affected components
Student Record System Project Student Record System=4.0
Phpgurukul Student Record System=4.0
Event History
Jul 22, 2021
CVE Published
via MITRE·03:43 PM
Data Sourced
via MITRE·03:43 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-26762?
CVE-2021-26762 is categorized as a high severity SQL injection vulnerability.
2
How do I fix CVE-2021-26762?
To fix CVE-2021-26762, validate and sanitize all user inputs, especially the cid parameter in the edit-course.php script.
3
What systems are affected by CVE-2021-26762?
CVE-2021-26762 affects PHPGurukul Student Record System version 4.0.
4
Can CVE-2021-26762 lead to data breaches?
Yes, CVE-2021-26762 can allow attackers to execute arbitrary SQL statements, potentially leading to data breaches.
5
Is CVE-2021-26762 an easy vulnerability to exploit?
CVE-2021-26762 is typically considered easy to exploit due to the nature of SQL injection.