CVE:CVE-2021-43451
CNNVD:CNNVD-202112-038
Phpgurukul Employee Record Management System是PHPGurukul（Phpgurukul）团队的一个员工记录管理系统。
PHPGURUKUL Employee Record Management System 1.2版本存在SQL注入漏洞，该漏洞源于软件中forgetpassword.php中的Email POST参数缺少有效的过滤与转义。
solution:Upgrade employee_record_management_system_project employee_record_management_system to a higher version than 1.2,and avoid the version 1.2