Security Advisory

CVE-2024-53603

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-11-27 00:00:00
Last updated 2024-11-27 15:19:11
Assigner mitre
State PUBLISHED

Description

A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.