VULNERABILITY INTELLIGENCE

CVE-2025-41085

CVSS score5.1 MEDIUM

EPSS probability0.56%

CISA KEVNot currently listed

Published2026-02-04

Last modified2026-06-17

Description

A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /add-subject.php. The manipulation of the argument sub1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.