CVE-2024-48282: SQL Injection
A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the femail parameter in a POST HTTP request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48282?
CVE-2024-48282 is considered a high severity vulnerability due to its potential for unauthorized database access through SQL injection.
How do I fix CVE-2024-48282?
To fix CVE-2024-48282, you should sanitize and validate the 'femail' parameter in the /password-recovery.php file to prevent SQL injection.
Who is affected by CVE-2024-48282?
CVE-2024-48282 affects users of PHPGurukul User Registration & Login and User Management System version 3.2.
What type of attack does CVE-2024-48282 facilitate?
CVE-2024-48282 facilitates SQL injection attacks that can lead to arbitrary SQL commands execution.
What component is vulnerable in CVE-2024-48282?
The vulnerable component in CVE-2024-48282 is the /password-recovery.php script in the PHPGurukul User Registration & Login and User Management System.