CVE-2024-11966: PHPGurukul Complaint Management system index.php sql injection

Published Nov 28, 2024

Updated

A vulnerability was found in PHPGurukul Complaint Management system 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Phpgurukul Complaint Management system=1.0

Event History

Nov 28, 2024

CVE Published

via MITRE·05:31 PM

Data Sourced

via MITRE·05:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-11966?

CVE-2024-11966 is classified as a critical severity vulnerability.

How does CVE-2024-11966 affect the system?

CVE-2024-11966 affects PHPGurukul Complaint Management system 1.0 through an SQL injection vulnerability in the /admin/index.php file.

What can attackers do with CVE-2024-11966?

Attackers can exploit CVE-2024-11966 to manipulate the username argument, potentially gaining unauthorized access or executing arbitrary SQL commands.

Is remote exploitation possible with CVE-2024-11966?

Yes, CVE-2024-11966 can be exploited remotely, allowing attackers to target vulnerable systems without physical access.

How can I fix CVE-2024-11966?

To fix CVE-2024-11966, update to the latest version of the PHPGurukul Complaint Management system that patches this SQL injection vulnerability.