| عنوان | PHPGurukul Company Visitor Management System PHP V2.0 SQL injection (CWE-89) |
|---|
| الوصف | During the security review of "Company Visitor Management System PHP V2.0", I discovered a critical SQL injection vulnerability in the "/forgot-password.php" file. This vulnerability stems from insufficient user input validation of the 'email' and 'contactno' parameters in the password recovery flow. The vulnerable code takes user-supplied email and contact number directly from POST parameters and concatenates them into a SQL SELECT query without any sanitization. An unauthenticated remote attacker can inject malicious SQL code to bypass the verification check, enumerate valid admin accounts, and proceed to reset any admin's password via the resetpassword.php endpoint. Immediate remedial measures are needed. |
|---|
| المصدر | ⚠️ https://github.com/mzxqqwq/CVE/issues/2 |
|---|
| المستخدم | mzxqqwq (UID 99169) |
|---|
| ارسال | 21/06/2026 10:59 AM (4 أشهر منذ) |
|---|
| الاعتدال | 06/08/2026 10:16 PM (2 months later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 310330 [PHPGurukul Company Visitor Management System 1.0 /forgot-password.php email حقن SQL] |
|---|
| النقاط | 0 |
|---|