CVE-2024-13085

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89
• CWE-89

• https://phpgurukul.com/Product
• https://vuldb.com/?ctiid.289838Permissions Required, Third Party Advisory
• https://vuldb.com/?id.289838Permissions Required, Third Party Advisory
• https://vuldb.com/?submit.472196Third Party Advisory

Published

Dec 31, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1308The WooCommerce Cloak Affiliate Links plugin for WordPress i…7.5
• CVE-2024-13080A vulnerability was found in PHPGurukul Land Record System 1…5.4
• CVE-2024-13081A vulnerability was found in PHPGurukul Land Record System 1…5.4
• CVE-2024-13082A vulnerability was found in PHPGurukul Land Record System 1…6.1
• CVE-2024-13083A vulnerability classified as problematic has been found in …5.4
• CVE-2024-13084A vulnerability classified as critical was found in PHPGuruk…9.8
• CVE-2024-13086An exposure of sensitive information vulnerability has been …7.5
• CVE-2024-13087A command injection vulnerability has been reported to affec…6.7
• CVE-2024-13088An improper authentication vulnerability has been reported t…7.8
• CVE-2024-13089An OS command injection vulnerability within the update func…7.5
• CVE-2024-1309Uncontrolled Resource Consumption vulnerability in Honeywell…7.5
• CVE-2024-13090A privilege escalation vulnerability may enable a service ac…7.3