rsecroot/Online-Course-Registration

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-0547 ↗	Jan 2, 2026Friday, 2 January 2026, 10:15	6.3 MEDIUM	6.5 MEDIUM
A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be launched remotely. The exploit has been made public and could be used.
CVE-2025-15406 ↗	Jan 1, 2026Thursday, 1 January 2026, 17:15	6.3 MEDIUM	6.5 MEDIUM
A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.