CVE-2024-30982: SQL Injection
SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the upid parameter in the /view-user-detail.php file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30982?
CVE-2024-30982 has a high severity level due to its potential for allowing arbitrary SQL commands to be executed.
How do I fix CVE-2024-30982?
To fix CVE-2024-30982, sanitize and validate the 'upid' parameter in the /view-user-detail.php file to prevent SQL injection.
What are the potential impacts of CVE-2024-30982?
The potential impacts of CVE-2024-30982 include unauthorized access to database information, data manipulation, or even complete control over the database.
Which version of the software is affected by CVE-2024-30982?
CVE-2024-30982 affects version 1.0 of the phpgurukul Cyber Cafe Management System using PHP & MySQL.
How can attackers exploit CVE-2024-30982?
Attackers can exploit CVE-2024-30982 by injecting malicious SQL commands through the 'upid' parameter in the /view-user-detail.php file.