SQL Injection Vulnerability in PHPGurukul Student Record System
CVE-2024-44632
Currently unrated
What is CVE-2024-44632?
The PHPGurukul Student Record System version 3.20 is susceptible to an SQL Injection attack. This vulnerability arises through insufficient validation of user-supplied data in the password-recovery.php script. Attackers can exploit this flaw by manipulating the 'id' and 'emailid' parameters to execute arbitrary SQL commands. As a result, sensitive data may be compromised, including user credentials and personal information.