PHPGurukul Bank Locker Management System Search index.php sql injection

CVE-2023-1963

Summary

A vulnerability has been discovered in the PHPGurukul Bank Locker Management System version 1.0, specifically affecting the 'Search' component's handling of the input from the index.php file. An attacker may exploit this weakness by crafting a specially formed input that reaches the searchinput argument, enabling SQL injection attacks. This vulnerability can be exploited remotely, potentially allowing malicious actors to execute arbitrary SQL commands within the application's database. Public disclosures related to this issue have been made, heightening the urgency for users to ensure their systems are adequately protected. More details can be found in the references.

References