4 matches found
CVE-2024-44633
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php...
6.5CVSS8AI score0.0024EPSS
SaveExploits1References1
CVE-2024-44633
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php...
6.5CVSS0.0024EPSS
SaveExploits1References2
CVE-2024-44633
PHPGurukul Student Record System 3.20 is vulnerable to a SQL Injection vulnerability within the change-password.php file. The root cause is a lack of proper validation for the currentpassword parameter against externally entered SQL statements. An attacker can exploit this flaw to execute illegal...
6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References2Affected Software1
20