CVE-2025-9729: PHPGurukul Online Course Registration student-registration.php sql injection
A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php. Performing manipulation of the argument studentname results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9729?
CVE-2025-9729 is classified as a high-severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-9729?
To fix CVE-2025-9729, sanitize and validate all user inputs, especially the 'studentname' parameter, to prevent SQL injection.
What impact does CVE-2025-9729 have on PHPGurukul Online Course Registration?
CVE-2025-9729 allows attackers to manipulate the student registration process, leading to unauthorized access to the database.
Can CVE-2025-9729 be exploited remotely?
Yes, CVE-2025-9729 can be exploited remotely, allowing attackers to execute SQL commands without local access.
Which versions of PHPGurukul Online Course Registration are affected by CVE-2025-9729?
CVE-2025-9729 affects version 3.1 of PHPGurukul Online Course Registration.