VULNERABILITY INTELLIGENCE
CVE-2024-30998
CVSS score9.8 CRITICAL
EPSS probability1.22%
CISA KEVNot currently listed
Published2024-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89
Primary references
- cve@mitre.org — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory