SQL Injection Vulnerability in Student Record System by PHP Gurukul

CVE-2024-27685

What is CVE-2024-27685?

A SQL Injection vulnerability exists in the Student Record System using PHP and MySQL version 3.20. This flaw may allow remote attackers to exploit the system by sending crafted payloads that manipulate the $cshortname, $cfullname, and $cdate variables. Such attacks can lead to unauthorized access to sensitive information stored within the database, posing significant risks to the database's integrity and confidentiality. Organizations utilizing this system are encouraged to evaluate their installations and apply necessary mitigations.

References