Sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file password-recovery.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. T...

CVE-2023-6648 PHPGurukul Nipah Virus Testing Management System password-recovery.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. It is possible to initiate the attack...

CVE-2023-6648

The CVE-2023-6648 entry affects PHPGurukul Nipah Virus Testing Management System 1.0, with a vulnerability in password-recovery.php. The issue arises from manipulating the username (and contactno) parameter, enabling SQL injection and remote execution. Multiple connected sources confirm a public ...