PHPGurukul Online Course Registration

Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/check_availability.php, admin/index.php, change-password.php, check_availability.php, includes/header.php, index.php, and pincode-verification.php.

PHPGurukul Online Course Registration edit-student-profile.php sql injection

PHPGurukul Online Course Registration department.php sql injection

PHPGurukul Online Course Registration news.php sql injection

PHPGurukul Online Course Registration course.php sql injection

PHPGurukul Online Course Registration level.php sql injection

PHPGurukul Online Course Registration my-profile.php sql injection

PHPGurukul Online Course Registration semester.php sql injection

PHPGurukul Online Course Registration session.php sql injection

PHPGurukul Online Course Registration student-registration.php sql injection

PHPGurukul Online Course Registration authorization

PHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack.

PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on all administrative forms. An attacker can perform unauthorized actions on behalf of authenticated administrators by tricking them into visiting a malicious webpage.