CVE-2024-3085 HIGH

CVE-2024-3085: PHPGurukul Emergency Ambulance Hiring Portal Admin Login Page login.php sql injection

Vendor Phpgurukul

Product Emergency Ambulance Hiring Portal

Weakness CWE-89 · SQLi

Published March 30, 2024

Last update March 25, 2025

View on NVD All CVEs

CVSS base score

7.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258678 is the identifier assigned to this vulnerability.

Key dates

02Disclosure timeline

March 30, 2024 CVE published

March 25, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-3085 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html