CVE-2024-30985

A SQL Injection vulnerability exists in the phpgurukul Client Management System version 1.1 (using PHP & MySQL). The flaw is located in the "B/W Dates Reports" page, where an attacker can execute arbitrary SQL commands by manipulating the "todate" and "fromdate" parameters. This vulnerability all...