PoC Index

CVE-2024-30998

CRITICAL 9.8EPSS 1.2%

SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
1.22% chance of exploitation in the next 30 days, 66th percentile
Published
2024-04-03
Updated
2024-08-02

Proof-of-concept exploits (2)

References

Related