CVE-2026-0547: PHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload
A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0547?
CVE-2026-0547 is rated as a high severity vulnerability due to the unrestricted file upload associated with the student registration page.
How do I fix CVE-2026-0547?
To fix CVE-2026-0547, update PHPGurukul Online Course Registration to version 3.2 or later, which addresses the vulnerability.
What component is affected by CVE-2026-0547?
CVE-2026-0547 affects the '/admin/edit-student-profile.php' component of the Student Registration Page in the software.
What type of vulnerability is CVE-2026-0547?
CVE-2026-0547 is categorized as a file upload vulnerability that allows attackers to upload arbitrary files to the server.
Can CVE-2026-0547 lead to data compromise?
Yes, CVE-2026-0547 can lead to data compromise, including unauthorized access to sensitive files or system exploitation.