CVE-2021-26764: SQL Injection
Published Jul 22, 2021
·Updated
SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php.
Affected Software
2 affected components
Student Record System Project Student Record System=4.0
Phpgurukul Student Record System=4.0
Event History
Jul 22, 2021
CVE Published
via MITRE·03:56 PM
Data Sourced
via MITRE·03:56 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-26764?
CVE-2021-26764 is classified as a critical SQL injection vulnerability.
2
How do I fix CVE-2021-26764?
To fix CVE-2021-26764, validate and sanitize the input from the 'id' parameter and use prepared statements for database queries.
3
Who is affected by CVE-2021-26764?
CVE-2021-26764 affects users of PHPGurukul Student Record System version 4.0.
4
What type of vulnerability is CVE-2021-26764?
CVE-2021-26764 is an SQL injection vulnerability.
5
What can an attacker do with CVE-2021-26764?
An attacker exploiting CVE-2021-26764 can execute arbitrary SQL statements on the database.