CVE-2024-30990

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

CVE-2024-30990

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

CVE-2024-30990

The phpgurukul Client Management System version 1.1 is vulnerable to a SQL Injection flaw in the Invoices page. The root cause is the improper neutralization of special elements in the searchdata parameter, allowing an attacker to execute arbitrary SQL commands. This may lead to unauthorized data...