PHPGurukul Student Record System version 3.20 contains an SQL Injection vulnerability in the add-course.php script. The flaw exists in the course-short, course-full, and cdate parameters, allowing an attacker to inject malicious SQL code. This vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity impact with potential confidentiality and integrity loss but no availability impact.