CVE-2026-82424: PHPGurukul Student Information System student_edit1.php sql injection
A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /studentedit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable and requires low privileges. No user interaction is required.
Which input should defenders prioritize reviewing?
The affected input is the ID argument handled by /student_edit1.php. Manipulation of this argument can lead to SQL injection.
How urgent is remediation?
Public exploit availability is reported, which increases the likelihood of attempted attacks. The supplied severity is medium (CVSS 6.3) and the impact includes low confidentiality, integrity, and availability effects.