CVE-2024-51103

Name of the Vulnerable Software and Affected Versions PHPGURUKUL Student Management System using PHP and MySQL version 1

Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/studentrecordms/password-recovery.php" endpoint, specifically via the emailid and id parameters.

Recommendations For PHPGURUKUL Student Management System using PHP and MySQL version 1, consider restricting access to the "/studentrecordms/password-recovery.php" endpoint until a patch is available. As a temporary workaround, avoid using the emailid and id parameters in this endpoint to minimize the risk of exploitation.