SQL Injection Vulnerability in PHPGurukul Student Record System
CVE-2024-44633
Currently unrated
What is CVE-2024-44633?
The PHPGurukul Student Record System version 3.20 has a vulnerability that allows an attacker to perform SQL injection through the 'currentpassword' parameter in the 'change-password.php' file. This security flaw can potentially be exploited to gain unauthorized access to sensitive user data, making it crucial for users and administrators to take immediate steps to mitigate the risk by applying necessary patches and following security best practices.