← back
CVE-2024-30998criticalCWE-89

CVE-2024-30998

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.8epss 1.2%
from disclosure to weapon0 days
Published on NVDApr 3
1st PoCMar 30
exploitation probability
1.2%top 34% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.