Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8xvq-hhq9-99ff

Опубликовано: 02 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

EPSS

Процентиль: 9%
0.00033
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 6.5
nvd
2 месяца назад

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

EPSS

Процентиль: 9%
0.00033
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89