CVE-2024-12977mediumCWE-74CWE-89

CVE-2024-12977: medium-severity vulnerability in PHPGurukul Complaint Management System

PHPGurukul Complaint Management System state.php sql injection

Published

Follow this CVE+ Monitor Complaint Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.6%
A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/state.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
PHPGurukul · Complaint Management System
Related CVEs — PHPGurukul Complaint Management System

In the same product, most dangerous first.

CVE-2024-13004MEDIUMPHPGurukul Complaint Management System category.php sql injectionEPSS 0.8%CVE-2024-12230MEDIUMPHPGurukul Complaint Management System subcategory.php sql injectionEPSS 0.7%CVE-2024-12229MEDIUMPHPGurukul Complaint Management System complaint-search.php sql injectionEPSS 0.7%CVE-2024-12228MEDIUMPHPGurukul Complaint Management System user-search.php sql injectionEPSS 0.7%CVE-2025-4761MEDIUMPHPGurukul Complaint Management System admin-profile.php sql injectionEPSS 0.5%CVE-2025-5660MEDIUMPHPGurukul Complaint Management System register-complaint.php sql injectionEPSS 0.5%