CVE-2024-54842

A SQL injection vulnerability was found in phpgurukul Online Nurse Hiring System v1.0 in /admin/password-recovery.php via the mobileno parameter.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-12-12

Last modified

2024-12-12

Weaknesses

CWE-89

Affected products

• Online Nurse Hiring System (Phpgurukul)

References

• https://github.com/achchhelalchauhan/phpgurukul/blob/main/SQL%20injection%20ONHP-forgetpass-mobileno.pdf