A vulnerability categorized as critical has been discovered in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload.
This vulnerability is cataloged as CVE-2026-0547. The attack may be launched remotely. Furthermore, there is an exploit available.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.