exploitDog

CVE-2024-54790

Опубликовано: 19 дек. 2024

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to execute arbitrary code via the visittime parameter.

Ссылки

https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Pre-School%20Enrollment/SQL%20Injection%20pr-school%20i.pdf
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpgurukul:pre-school_enrollment_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01993

Низкий

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-qf32-jmjm-hhgw

CVSS3: 7.5

github

около 1 года назад

A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to execute arbitrary code via the visittime parameter.

EPSS

Процентиль: 83%

0.01993

Низкий

7.5 High

CVSS3

Дефекты

CWE-89