CVE-2024-0361: PHPGurukul Hospital Management System contact.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Hospital Management System 1.0. Affected is an unknown function of the file admin/contact.php. The manipulation of the argument mobnum leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250128.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0361?
CVE-2024-0361 is classified as a critical vulnerability.
How does CVE-2024-0361 affect the PHPGurukul Hospital Management System?
CVE-2024-0361 allows a SQL injection through the 'mobnum' argument in the admin/contact.php file.
Who is affected by CVE-2024-0361?
All users of PHPGurukul Hospital Management System version 1.0 are affected by CVE-2024-0361.
What are the potential risks of CVE-2024-0361?
The exploitation of CVE-2024-0361 can lead to unauthorized access and manipulation of the database.
How can I mitigate CVE-2024-0361?
Mitigation of CVE-2024-0361 requires updating to a patched version of the PHPGurukul Hospital Management System.