CVE-2024-44639: SQL Injection
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44639?
CVE-2024-44639 has a high severity rating due to its ability to allow SQL Injection attacks which can compromise sensitive data.
How do I fix CVE-2024-44639?
To fix CVE-2024-44639, sanitize and validate all user inputs in the add-subject.php file, particularly the sub1, sub2, sub3, sub4, and course-short parameters.
What versions of PHPGurukul Student Record System are affected by CVE-2024-44639?
CVE-2024-44639 affects PHPGurukul Student Record System version 3.20.
What impacts can result from exploiting CVE-2024-44639?
Exploiting CVE-2024-44639 can lead to unauthorized access to the database, allowing attackers to manipulate or extract sensitive information.
Is CVE-2024-44639 a common vulnerability?
SQL Injection vulnerabilities, such as CVE-2024-44639, are among the most common types of security flaws found in web applications.