CVE-2024-3767 MEDIUM

CVE-2024-3767: PHPGurukul News Portal edit-post.php sql injection

Vendor Phpgurukul

Product News Portal

Weakness CWE-89 · SQLi

Published April 15, 2024

Last update May 30, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code of the file /admin/edit-post.php. The manipulation of the argument posttitle/category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

April 15, 2024 CVE published

May 30, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-3767 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2025-2372 PHPGurukul Human Metapneumovirus Testing Management System Password Recovery Page password-recovery.php sql injection CVE-2023-5412 Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode CVE-2025-40731 SQL injection vulnerability in Daily Expense Manager CVE-2024-7751 SourceCodester Clinics Patient Management System update_medicine.php sql injection CVE-2024-7281 SourceCodester Lot Reservation Management System sql injection