SQL Injection Vulnerability in PHPGurukul Pre-School Enrollment System
CVE-2024-54810

Currently unrated

Key Information:

Vendor: PHPGurukul
Status: Pre-school Enrollment System
Vendor: CVE Published:; 12 December 2024

What is CVE-2024-54810?

A SQL injection vulnerability has been identified within the PHPGurukul Pre-School Enrollment System Project version 1.0. This vulnerability resides in the password recovery functionality (/preschool/admin/password-recovery.php) and allows remote attackers to manipulate the 'mobileno' parameter, potentially enabling them to execute arbitrary code. Exploiting this weakness could lead to unauthorized access and data compromise, making it essential for users and administrators to secure their systems against such threats.

References

https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Ph...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 12, 2024
Vulnerability Reserved
Dec 6, 2024