https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-55016.htmlhttps://patchthecve.com/cve/CVE-2024-55016.htmlTue, 27 Oct 2026 18:10:00 +0000MEDIUM 6.5: PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php.https://patchthecve.com/cve/CVE-2024-44639.htmlhttps://patchthecve.com/cve/CVE-2024-44639.htmlTue, 27 Oct 2026 18:10:00 +0000MEDIUM 6.5: PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php.https://patchthecve.com/cve/CVE-2024-44636.htmlhttps://patchthecve.com/cve/CVE-2024-44636.htmlTue, 27 Oct 2026 18:10:00 +0000MEDIUM 6.5: PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php.https://patchthecve.com/cve/CVE-2024-44635.htmlhttps://patchthecve.com/cve/CVE-2024-44635.htmlTue, 27 Oct 2026 18:10:00 +0000MEDIUM 6.1: PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php.https://patchthecve.com/cve/CVE-2024-44632.htmlhttps://patchthecve.com/cve/CVE-2024-44632.htmlTue, 27 Oct 2026 18:10:00 +0000MEDIUM 6.5: PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php.