High · 7.5 CVE-2024-54790 EUVD-2024-52670GHSA-qf32-jmjm-hhgw

A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to exe…

Published Dec 19, 2024 · Updated Dec 19, 2024 · Assigned by mitre

Description

A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to execute arbitrary code via the visittime parameter.

References

https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Pre-School%20Enrollment/SQL%20Injection%20pr-school%20i.pdf