CVE-2025-4793: PHPGurukul Online Course Registration edit-student-profile.php sql injection
A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been classified as critical. Affected is an unknown function of the file /edit-student-profile.php. The manipulation of the argument cgpa leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4793?
CVE-2025-4793 has been classified as critical due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-4793?
To fix CVE-2025-4793, ensure to sanitize and validate user inputs in the edit-student-profile.php file to prevent SQL injection.
What is the impact of CVE-2025-4793?
The impact of CVE-2025-4793 allows attackers to manipulate the cgpa parameter, potentially leading to unauthorized access to the database.
Which software is affected by CVE-2025-4793?
CVE-2025-4793 affects PHPGurukul Online Course Registration version 3.1.
Can CVE-2025-4793 be exploited remotely?
Yes, CVE-2025-4793 can be exploited remotely, allowing attackers to execute SQL injection attacks from external locations.