CVE-2024-13004: falha de média gravidade em PHPGurukul Complaint Management System
PHPGurukul Complaint Management System category.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.8%
A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
PHPGurukul · Complaint Management SystemCVEs relacionadas — PHPGurukul Complaint Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-12230MEDIUMPHPGurukul Complaint Management System subcategory.php sql injectionEPSS 0.7%CVE-2024-12229MEDIUMPHPGurukul Complaint Management System complaint-search.php sql injectionEPSS 0.7%CVE-2024-12228MEDIUMPHPGurukul Complaint Management System user-search.php sql injectionEPSS 0.7%CVE-2024-12977MEDIUMPHPGurukul Complaint Management System state.php sql injectionEPSS 0.6%CVE-2025-4761MEDIUMPHPGurukul Complaint Management System admin-profile.php sql injectionEPSS 0.5%CVE-2025-5660MEDIUMPHPGurukul Complaint Management System register-complaint.php sql injectionEPSS 0.5%