CVE-2024-51102

MEDIUM Year: 2024
CVSS v3 Score
4.4
Medium
Weakness Type
CWE-89
View all →

Vulnerability Description

PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and password parameters.

Related Vulnerabilities

CVE-2020-0060

MEDIUM
CVSS:4.4(Medium)

In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This could lead to local information disclosure with System execution privileges neede...

CWE-892020

CVE-2024-29174

MEDIUM
CVSS:4.4(Medium)

Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading ...

CWE-892024

CVE-2024-50584

MEDIUM
CVSS:4.4(Medium)

An authenticated attacker with the user/role "Poweruser" can perform an SQL injection by accessing the /class/template_io.php file and supplying malicious GET parameters. The "templates" parameter is ...

CWE-892024

CVE-2024-3060

MEDIUM
CVSS:4.5(Medium)

The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL injection attacks

CWE-892024

CVE-2015-7784

MEDIUM
CVSS:4.3(Medium)

SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitra...

CWE-892015

CVE-2017-12302

MEDIUM
CVSS:4.3(Medium)

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL ...

CWE-892017