CVE-2024-55099
CRITICAL 9.8EPSS 1.0%
A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username parameter.
- CVSS v3.1 CNA
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.04% chance of exploitation in the next 30 days, 64th percentile
- Published
- 2024-12-12
- Updated
- 2024-12-16
Proof-of-concept exploits (2)
- kuzgunaka/CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-1★ · 2024-12-10
- ugurkarakoc1/CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-1★ · 2024-12-10