CVE-2024-44659

The PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection (CWE-89) due to a lack of validation for externally entered SQL statements in the email parameter of the forgot-password.php script. Successful exploitation allows an attacker to execute arbitrary SQL code, which could lead ...