CVE-2024-3767: PHPGurukul News Portal edit-post.php sql injection
A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code of the file /admin/edit-post.php. The manipulation of the argument posttitle/category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3767?
CVE-2024-3767 is classified as critical due to its potential for remote SQL injection.
How does CVE-2024-3767 affect PHPGurukul News Portal?
CVE-2024-3767 affects the file /admin/edit-post.php, specifically allowing SQL injection through the posttitle argument.
Who can exploit CVE-2024-3767?
CVE-2024-3767 can be exploited remotely by attackers without authentication requirements.
What should be done to remediate CVE-2024-3767?
To fix CVE-2024-3767, the application code should be updated to properly sanitize user input in the posttitle argument.
Is there a known fix for CVE-2024-3767?
Currently, there is no specific patch provided for CVE-2024-3767, so immediate code adjustments are recommended.