CVE-2024-3769

A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /login.php. The manipulation of the argument id/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260616.

• CWE-89

• https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20Authentication%20Bypass.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.260616Permissions Required, VDB Entry
• https://vuldb.com/?id.260616Permissions Required, VDB Entry
• https://vuldb.com/?submit.316302Third Party Advisory, VDB Entry
• https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20Authentication%20Bypass.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.260616Permissions Required, VDB Entry
• https://vuldb.com/?id.260616Permissions Required, VDB Entry
• https://vuldb.com/?submit.316302Third Party Advisory, VDB Entry

Published

Apr 15, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37677An issue in Shenzhen Weitillage Industrial Co., Ltd the acce…7.5
• CVE-2024-37678Cross Site Scripting vulnerability in Hangzhou Meisoft Infor…5.3
• CVE-2024-37679Cross Site Scripting vulnerability in Hangzhou Meisoft Infor…6.1
• CVE-2024-3768A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-37680Hangzhou Meisoft Information Technology Co., Ltd. FineSoft <…6.1
• CVE-2024-37681An issue the background management system of Shanxi Internet…6.5
• CVE-2024-37694Rejected reason: This submission has been rejected by the CN…
• CVE-2024-37699An issue in DataLife Engine v.17.1 and before is vulnerable …9.8
• CVE-2024-3770A vulnerability has been found in PHPGurukul Student Record …9.8
• CVE-2024-3771A vulnerability was found in PHPGurukul Student Record Syste…8.8
• CVE-2024-3772Regular expression denial of service in Pydanic < 2.4.0, < 1…7.5
• CVE-2024-37726Insecure Permissions vulnerability in Micro-Star Internation…6.8