ZeroHour

CVE-2024-53604

PoC
CVSS 3.1
9.8 critical
EPSS
1%p61
Published
()
Modified
Description

A SQL Injection vulnerability was found in /covid-tms/check_availability.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the mobnumber POST request parameter.

Vendors
phpgurukul
Products
covid19 testing management system
Weakness
CWE-94
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.