CVE-2024-3770

A vulnerability has been found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage-courses.php?del=1. The manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260617 was assigned to this vulnerability.

• CWE-89

• https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20SQL%20Injection%20-%203.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.260617Permissions Required, VDB Entry
• https://vuldb.com/?id.260617Permissions Required, VDB Entry
• https://vuldb.com/?submit.316305Third Party Advisory, VDB Entry
• https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20SQL%20Injection%20-%203.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.260617Permissions Required, VDB Entry
• https://vuldb.com/?id.260617Permissions Required, VDB Entry
• https://vuldb.com/?submit.316305Third Party Advisory, VDB Entry

Published

Apr 15, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3768A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-37680Hangzhou Meisoft Information Technology Co., Ltd. FineSoft <…6.1
• CVE-2024-37681An issue the background management system of Shanxi Internet…6.5
• CVE-2024-3769A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-37694Rejected reason: This submission has been rejected by the CN…
• CVE-2024-37699An issue in DataLife Engine v.17.1 and before is vulnerable …9.8
• CVE-2024-3771A vulnerability was found in PHPGurukul Student Record Syste…8.8
• CVE-2024-3772Regular expression denial of service in Pydanic < 2.4.0, < 1…7.5
• CVE-2024-37726Insecure Permissions vulnerability in Micro-Star Internation…6.8
• CVE-2024-37728Arbitrary File Read vulnerability in Xi'an Daxi Information …7.5
• CVE-2024-37732Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 al…6.1
• CVE-2024-37734An issue in OpenEMR 7.0.2 allows a remote attacker to escala…9.8