CVE-2024-30998

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-30998
SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/efekaanakkar/CVEs/blob/main/PHPGurukul-Men-Salon-Management-System-2.0.md Exploit Third Party Advisory
https://github.com/efekaanakkar/CVEs/blob/main/PHPGurukul-Men-Salon-Management-System-2.0.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:phpgurukul:men_salon_management_system:2.0:*:*:*:*:*:*:*
History

08 Apr 2025, 15:43

Type Values Removed Values Added
CPE cpe:2.3:a:phpgurukul:men_salon_management_system:2.0:*:*:*:*:*:*:*
References () https://github.com/efekaanakkar/CVEs/blob/main/PHPGurukul-Men-Salon-Management-System-2.0.md - () https://github.com/efekaanakkar/CVEs/blob/main/PHPGurukul-Men-Salon-Management-System-2.0.md - Exploit, Third Party Advisory
First Time Phpgurukul
Phpgurukul men Salon Management System
Information

Published : 2024-04-03 06:15

Updated : 2025-04-08 15:43

NVD link : CVE-2024-30998

Mitre link : CVE-2024-30998

CVE.ORG link : CVE-2024-30998

JSON object : View

Products Affected

phpgurukul

  • men_salon_management_system
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')