A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request.
References
Configurations
No configuration.
History
16 Oct 2024, 16:38
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
15 Oct 2024, 16:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-89 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.6 |
15 Oct 2024, 13:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-15 13:15
Updated : 2024-10-16 16:38
NVD link : CVE-2024-48280
Mitre link : CVE-2024-48280
CVE.ORG link : CVE-2024-48280
JSON object : View
Products Affected
No product.
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')