CVE-2021-43451

creationtimestamp| type| source ---|---|--- 2021-12-01 22:35:45+00:00| seen| https://t.me/cibsecurity/33230...

CVE-2021-43451

SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php...

CVE-2021-43451

PHPGURUKUL Employee Record Management System version 1.2 contains a SQL Injection vulnerability exploitable via the Email POST parameter of /forgetpassword.php. The issue arises from unsafe handling of user input in that endpoint, enabling attackers to manipulate SQL queries. Impact is aligned wi...