PHPGurukul Student Record System version 3.20 contains a SQL Injection vulnerability in the admin-profile.php script via the adminname and aemailid parameters. This flaw allows an unauthenticated attacker to inject malicious SQL commands, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No patch or remediation information is currently available, and no known exploits are reported in the wild.