CVE-2025-4771: PHPGurukul Online Course Registration course.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/course.php. The manipulation of the argument coursecode leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4771?
CVE-2025-4771 is classified as a critical vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-4771?
To fix CVE-2025-4771, update PHPGurukul Online Course Registration to the latest version that addresses this SQL injection vulnerability.
What kind of attack can be executed via CVE-2025-4771?
CVE-2025-4771 allows for a SQL injection attack which can be launched remotely by manipulating the coursecode parameter.
Which file is affected by CVE-2025-4771?
CVE-2025-4771 affects the /admin/course.php file in the PHPGurukul Online Course Registration application.
Is CVE-2025-4771 a local or remote vulnerability?
CVE-2025-4771 is a remote vulnerability that can be exploited over the network.