CVE-2025-9729 — Vulnerability intelligence

phpgurukul — online course registration

Published: 2025-08-31T13:15:32.453

CVSS

5.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php. Performing manipulation of the argument studentname results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Sources

• CVE-2025-9729
• Exploit, Issue Tracking, Third Party Advisory
• Product
• Permissions Required, VDB Entry
• Third Party Advisory, VDB Entry
• Third Party Advisory, VDB Entry