ZeroHour

CVE-2024-53603

PoC
CVSS 3.1
7.3 high
EPSS
<1%p53
Published
()
Modified
Description

A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.

Vendors
phpgurukul
Products
covid19 testing management system
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

In the news

No ingested article mentions this CVE yet.