CVE-2024-53364
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/view-detail.php. The issue affects the viewid parameter, where improper input sanitization allows attackers to inject malicious SQL queries.
Risk Assessment
An attacker can exploit this vulnerability to gain unauthorized access to the database, steal or modify data, potentially compromising the confidentiality and integrity of the system.
Recommendation
Immediately update the system to the latest version or apply a security patch. Additionally, implement input validation and sanitization for all parameters, especially in SQL queries.
Original NVD description (English source)
A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/view-detail.php. This vulnerability affects the viewid parameter, where improper input sanitization allows attackers to inject malicious SQL queries.