CVE-2024-5063: PHPGurukul Online Course Registration System index.php sql injection

Published May 17, 2024

Updated

A vulnerability was found in PHPGurukul Online Course Registration System 3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-264922 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Phpgurukul Online Course Registration System

Phpgurukul Online Course Registration System=3.1

Event History

May 17, 2024

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Apr 4, 58462

Event

via NVD·11:57 AM

Frequently Asked Questions

What is the severity of CVE-2024-5063?

CVE-2024-5063 is classified as a critical severity vulnerability.

What kind of vulnerability is CVE-2024-5063?

CVE-2024-5063 is an SQL injection vulnerability affecting the PHPGurukul Online Course Registration System.

Which file is affected by CVE-2024-5063?

CVE-2024-5063 affects the /admin/index.php file within the PHPGurukul Online Course Registration System.

How can I mitigate CVE-2024-5063?

To mitigate CVE-2024-5063, ensure proper validation and sanitation of user input for the username and password fields.

Which version of the software is vulnerable to CVE-2024-5063?

CVE-2024-5063 affects version 3.1 of the PHPGurukul Online Course Registration System.