CVE-2024-12230: PHPGurukul Complaint Management System subcategory.php sql injection

Published Dec 5, 2024

Updated

A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/subcategory.php. The manipulation of the argument category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Phpgurukul Complaint Management system=1.0

Event History

Dec 5, 2024

CVE Published

via MITRE·02:31 PM

Data Sourced

via MITRE·02:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-12230?

CVE-2024-12230 is classified as a critical vulnerability.

What type of vulnerability is CVE-2024-12230?

CVE-2024-12230 is a SQL injection vulnerability affecting PHPGurukul Complaint Management System 1.0.

Which file is vulnerable in CVE-2024-12230?

The vulnerability is located in the file /admin/subcategory.php.

How do I fix CVE-2024-12230?

To fix CVE-2024-12230, ensure that user inputs are properly sanitized and validated before being used in SQL queries.

What can happen if CVE-2024-12230 is exploited?

If exploited, CVE-2024-12230 can allow attackers to manipulate the database through SQL queries.