CVE-2024-44632

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

CVE-2024-44632

The PHPGurukul Student Record System version 3.20 is vulnerable to SQL Injection within the password-recovery.php script. The root cause is a lack of validation for externally entered SQL statements provided through the id and emailid parameters. An attacker can exploit this flaw to execute illeg...