CVE-2024-5357: PHPGurukul Zoo Management System forgot-password.php sql injection
A vulnerability has been found in PHPGurukul Zoo Management System 2.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266269 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5357?
CVE-2024-5357 is classified as a critical vulnerability.
How does CVE-2024-5357 affect the PHPGurukul Zoo Management System?
CVE-2024-5357 affects the /admin/forgot-password.php functionality, leading to SQL injection through the email parameter.
How do I fix CVE-2024-5357?
To fix CVE-2024-5357, sanitize and validate the input for the email parameter and implement prepared statements in SQL queries.
What versions of the PHPGurukul Zoo Management System are affected by CVE-2024-5357?
CVE-2024-5357 affects PHPGurukul Zoo Management System version 2.1.
Can CVE-2024-5357 lead to data breaches?
Yes, CVE-2024-5357 can lead to data breaches by allowing attackers to manipulate the database through SQL injection.