Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2024-30998

Description

SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component.

POC

Reference

- https://github.com/efekaanakkar/CVEs/blob/main/PHPGurukul-Men-Salon-Management-System-2.0.md

Github

- https://github.com/efekaanakkar/CVE-2024-30998

- https://github.com/efekaanakkar/CVEs

- https://github.com/nomi-sec/PoC-in-GitHub