PHPGurukul Student Record Management System version 3.20 contains a SQL Injection vulnerability in the login.php script via the id and password parameters. This flaw allows an unauthenticated attacker to inject malicious SQL code, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No official patch or remediation details are provided in the available data.