CVE-2024-30998

2024-04-0300:00:00

mitre

github.com

cve-2024-30998

phpgurukul men salon management system

sql injection

AI Score

8.1

Confidence

High

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:phpgurukul:men_salon_management_system:2.0:*:*:*:*:*:*:*"
    ],
    "vendor": "phpgurukul",
    "product": "men_salon_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]