CVE-2024-0651
Last modified
CVE-2024-0651 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. EPSS estimates a 0.63% chance of exploitation in the next 30 days.
Description
A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search-visitor.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251377 was assigned to this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phpgurukul | Company Visitor Management System | 1.0 |
References
- https://drive.google.com/file/d/1J3YaxX9RYZ_41-AYdwrCAPMT-YTqILKr/view?usp=sharingExploit, Third Party Advisory
- https://vuldb.com/?ctiid.251377Permissions Required, Third Party Advisory
- https://vuldb.com/?id.251377Third Party Advisory
- https://drive.google.com/file/d/1J3YaxX9RYZ_41-AYdwrCAPMT-YTqILKr/view?usp=sharingExploit, Third Party Advisory
- https://vuldb.com/?ctiid.251377Permissions Required, Third Party Advisory
- https://vuldb.com/?id.251377Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-0651?
How severe is CVE-2024-0651?
How do I fix CVE-2024-0651?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-0645Buffer overflow vulnerability in Explorer++ affecting versio…7.8
- CVE-2024-0646An out-of-bounds memory write flaw was found in the Linux ke…7.8
- CVE-2024-0647A vulnerability, which was classified as problematic, was fo…6.1
- CVE-2024-0648A vulnerability has been found in Yunyou CMS up to 2.2.6 and…9.8
- CVE-2024-0649A vulnerability was found in ZhiHuiYun up to 4.4.13 and clas…9.8
- CVE-2024-0650A vulnerability was found in Project Worlds Visitor Manageme…6.1
- CVE-2024-0652A vulnerability was found in PHPGurukul Company Visitor Mana…4.8
- CVE-2024-0653The Custom Field Template plugin for WordPress is vulnerable…4.8
- CVE-2024-0654A vulnerability, which was classified as problematic, was fo…7.8
- CVE-2024-0655A vulnerability has been found in Novel-Plus 4.3.0-RC1 and c…9.8
- CVE-2024-0656The Password Protected – Ultimate Plugin to Password Protect…4.8
- CVE-2024-0657The Internal Link Juicer: SEO Auto Linker for WordPress plug…4.8
Are you affected by CVE-2024-0651?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
