CVEs-PoC/2021/CVE-2021-26764.md

CVE-2021-26764

Description

SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php.

POC

Reference

• https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html
• https://phpgurukul.com/
• https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip

Github

No PoCs found on GitHub currently.