CVE-2024-55016

CWE-89SQL Injection3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.0%
top 91.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 14

Description

PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.5

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-44wv-r39h-27hr: PHPGurukul Student Record Management System 32025-11-14
CVEList
CVE-2024-55016: PHPGurukul Student Record Management System 32025-11-14
CVE-2024-55016 (MEDIUM CVSS 6.5) | PHPGurukul Student Record Managemen | cvebase.io