CVE-2024-3768: PHPGurukul/itsourcecode News Portal search.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue affects some unknown processing of the file search.php. The manipulation of the argument searchtitle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260615.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3768?
CVE-2024-3768 is classified as a critical vulnerability.
How does CVE-2024-3768 affect the PHPGurukul itsourcecode News Portal?
CVE-2024-3768 affects the processing of the file search.php, enabling a SQL injection vulnerability.
Can CVE-2024-3768 be exploited remotely?
Yes, the attack associated with CVE-2024-3768 can be initiated remotely.
What is the cause of the vulnerability CVE-2024-3768?
The cause of CVE-2024-3768 is improper handling of the searchtitle argument in search.php.
What steps should be taken to mitigate CVE-2024-3768?
Mitigation of CVE-2024-3768 involves sanitizing user inputs in search.php to prevent SQL injection.