CVE-2024-30985: SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL…

critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	client_management_system	—	—