critical9.8

CVE-2024-40477

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary S…

Impact

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter.

Affected products

Vendor	Product	Affected versions
Phpgurukul	Old Age Home Management System	Version 1.0

Weakness classification

CWE-89

References

NVD record
CVE.org record
https://github.com/takekaramey/CVE_Writeup/blob/main/PHPGurukul/Old%20Age%20Home%20Mgmt%20System%20v1.0/SQL%20Injection.pdf
https://phpgurukul.com/old-age-home-management-system-using-php-and-mysql/