CVE-2024-30985
SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todat…
Published: 2024-04-17 · CVSS: 9.8 · CVSS 3.1
SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7