SQL Injection Vulnerability in PHPGurukul Medical Card Generation System

CVE-2024-10301

Summary

A critical security vulnerability has been identified in the PHPGurukul Medical Card Generation System version 1.0. This issue resides in an unknown function within the file /admin/search-medicalcard.php, specifically affecting the Search component. The problem arises due to insufficient input validation, allowing attackers to manipulate the 'searchdata' parameter, which can lead to SQL injection attacks. This vulnerability can be exploited remotely, granting potential intruders unauthorized access to sensitive data stored in the database. The exploit has been publicly disclosed and can be used by malicious actors to compromise the security of affected installations.

References