| Titolo | PHPGurukul Company Visitor Management System PHP V2.0 SQL injection (CWE-89) |
|---|
| Descrizione | During the security review of "Company Visitor Management System PHP V2.0", I discovered a critical SQL injection vulnerability in the "/forgot-password.php" file. This vulnerability stems from insufficient user input validation of the 'email' and 'contactno' parameters in the password recovery flow. The vulnerable code takes user-supplied email and contact number directly from POST parameters and concatenates them into a SQL SELECT query without any sanitization. An unauthenticated remote attacker can inject malicious SQL code to bypass the verification check, enumerate valid admin accounts, and proceed to reset any admin's password via the resetpassword.php endpoint. Immediate remedial measures are needed. |
|---|
| Fonte | ⚠️ https://github.com/mzxqqwq/CVE/issues/2 |
|---|
| Utente | mzxqqwq (UID 99169) |
|---|
| Sottomissione | 21/06/2026 10:59 (4 mesi fa) |
|---|
| Moderazione | 06/08/2026 22:16 (2 months later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 310330 [PHPGurukul Company Visitor Management System 1.0 /forgot-password.php email iniezione SQL] |
|---|
| Punti | 0 |
|---|