Description
A SQL Injection vulnerability exists in the `ofrs/admin/index.php` script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process.
References
https://github.com/MarkLee131/PoCs/blob/main/CVE-2024-34987.md
https://www.exploit-db.com/exploits/51989
https://github.com/MarkLee131/PoCs/blob/main/CVE-2024-34987.md
https://www.exploit-db.com/exploits/51989
Weaknesses
134c704f-9b21-4f2e-91b3-4a467353bcc0
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
9.1 · Critical
Information
Source identifier
Vulnerability status
Analyzed
Published
2024-06-03T20:15:09.273Z
2 years agoLast modified
2026-06-17T07:34:16.490Z
3 months ago