PT-2024-35731 · Unknown · Phpgurukul Vehicle Parking Management System

Mohammed Athif · Published 2024-12-02 · Updated 2024-12-02 · CVE-2024-53364

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGURUKUL Vehicle Parking Management System version 1.13

Description A SQL injection issue was found in the /users/view-detail.php endpoint, specifically affecting the viewid parameter. Improper input sanitization allows attackers to inject malicious SQL queries.

Recommendations For PHPGURUKUL Vehicle Parking Management System version 1.13, consider disabling access to the /users/view-detail.php endpoint until a patch is available, or ensure proper input sanitization for the viewid parameter to prevent SQL injection attacks.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-53364

Affected Products

Phpgurukul Vehicle Parking Management System

References · 7

• 🔥 https://github.com/SCR-athif/CVE/tree/main/CVE-2024-53364 · Exploit
• https://osv.dev/vulnerability/CVE-2024-53364 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53364 · Security Note
• https://twitter.com/CVEnew/status/1863649278184526000 · Twitter Post
• http://phpgurukul.com · Note
• https://t.me/cvenotify/102828 · Telegram Post
• https://t.me/cvedetector/11802 · Telegram Post