CVE-2024-13004: PHPGurukul Complaint Management System category.php sql injection
Published Dec 29, 2024
·Updated
A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Phpgurukul Complaint Management system
Phpgurukul Complaint Management system=1.0
Event History
Dec 29, 2024
CVE Published
via MITRE·06:31 AM
Data Sourced
via MITRE·06:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-13004?
CVE-2024-13004 is classified as a critical vulnerability.
2
How does CVE-2024-13004 affect the PHPGurukul Complaint Management System?
CVE-2024-13004 allows for SQL injection through manipulation of the 'state' argument in the /admin/category.php file.
3
Can CVE-2024-13004 be exploited remotely?
Yes, CVE-2024-13004 can be exploited remotely.
4
What action should be taken to remediate CVE-2024-13004?
To remediate CVE-2024-13004, sanitize user inputs to prevent SQL injection vulnerabilities.
5
Which versions of PHPGurukul Complaint Management System are impacted by CVE-2024-13004?
CVE-2024-13004 affects PHPGurukul Complaint Management System version 1.0.