| 제목 | PHPGurukul Company Visitor Management System PHP V2.0 SQL injection (CWE-89) |
|---|
| 설명 | During the security review of "Company Visitor Management System PHP V2.0", I discovered a critical SQL injection vulnerability in the "/forgot-password.php" file. This vulnerability stems from insufficient user input validation of the 'email' and 'contactno' parameters in the password recovery flow. The vulnerable code takes user-supplied email and contact number directly from POST parameters and concatenates them into a SQL SELECT query without any sanitization. An unauthenticated remote attacker can inject malicious SQL code to bypass the verification check, enumerate valid admin accounts, and proceed to reset any admin's password via the resetpassword.php endpoint. Immediate remedial measures are needed. |
|---|
| 원천 | ⚠️ https://github.com/mzxqqwq/CVE/issues/2 |
|---|
| 사용자 | mzxqqwq (UID 99169) |
|---|
| 제출 | 2026. 06. 21. AM 10:59 (4 개월 ago) |
|---|
| 모더레이션 | 2026. 08. 06. PM 10:16 (2 months later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 310330 [PHPGurukul Company Visitor Management System 1.0 /forgot-password.php email SQL 주입] |
|---|
| 포인트들 | 0 |
|---|