PHPGurukul BP Monitoring Management System Password Recovery password-recovery.php sql injection

CVE-2023-1950

What is CVE-2023-1950?

A vulnerability exists in the PHPGurukul BP Monitoring Management System 1.0, specifically in the password-recovery.php file related to the password recovery feature. This vulnerability allows remote attackers to exploit the system by manipulating the emailid or contactno parameters, leading to SQL injection attacks. Such attacks could enable unauthorized access to sensitive database information. The issue has been publicly disclosed and poses a significant risk to organizations using this product. Users are strongly encouraged to apply security patches or mitigations as they become available.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References