CVE-2021-26765: SQL Injection
Published Jul 22, 2021
·Updated
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php.
Affected Software
2 affected components
Student Record System Project Student Record System=4.0
Phpgurukul Student Record System=4.0
Event History
Jul 22, 2021
CVE Published
via MITRE·03:33 PM
Data Sourced
via MITRE·03:33 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-26765?
CVE-2021-26765 is classified as a critical SQL injection vulnerability that can lead to unauthorized access to the database.
2
How do I fix CVE-2021-26765?
To fix CVE-2021-26765, sanitize and validate the input parameters in the edit-sub.php file to prevent SQL injection.
3
Who is affected by CVE-2021-26765?
CVE-2021-26765 affects users of PHPGurukul Student Record System version 4.0.
4
What types of attack can be executed through CVE-2021-26765?
CVE-2021-26765 allows attackers to execute arbitrary SQL statements, potentially compromising the database.
5
Is CVE-2021-26765 a common type of vulnerability?
Yes, SQL injection vulnerabilities like CVE-2021-26765 are common and can be exploited across various applications if not properly mitigated.