CVE-2024-11967: PHPGurukul Complaint Management system reset-password.php sql injection

Published Nov 28, 2024

Updated

A vulnerability was found in PHPGurukul Complaint Management system 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/reset-password.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Phpgurukul Complaint Management system=1.0

Event History

Nov 28, 2024

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-11967?

CVE-2024-11967 is classified as a critical vulnerability.

How do I fix CVE-2024-11967?

To fix CVE-2024-11967, update your PHPGurukul Complaint Management System to the latest version or apply security patches that address SQL injection vulnerabilities.

Which software versions are affected by CVE-2024-11967?

CVE-2024-11967 affects PHPGurukul Complaint Management System version 1.0.

What type of attack can be executed due to CVE-2024-11967?

CVE-2024-11967 enables remote SQL injection attacks through the reset-password functionality.

What file is associated with the CVE-2024-11967 vulnerability?

The CVE-2024-11967 vulnerability is associated with the file /admin/reset-password.php.