SQL Injection Vulnerability in PHPGurukul Medical Card Generation System
CVE-2024-10298
Key Information:
- Vendor
PHPgurukul
- Vendor
- CVE Published:
- 23 October 2024
What is CVE-2024-10298?
A significant SQL injection vulnerability has been identified in the PHPGurukul Medical Card Generation System version 1.0, specifically affecting the Managecard Edit Card Detail Page located at /admin/edit-card-detail.php. This flaw allows an attacker to manipulate the 'editid' parameter, potentially executing malicious SQL queries against the database. As this vulnerability can be exploited remotely, it poses a serious risk to the confidentiality and integrity of sensitive data managed by the system. Users are urged to implement security measures promptly to mitigate the risks associated with this vulnerability and maintain the security of their medical card administration systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Medical Card Generation System 1.0
References
CVSS V3.1
Timeline
Vulnerability published
