CVE-2024-3085

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258678 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/eahp_sqli.mdExploit
• https://vuldb.com/?ctiid.258678Permissions Required, VDB Entry
• https://vuldb.com/?id.258678Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.306958Third Party Advisory, VDB Entry
• https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/eahp_sqli.mdExploit
• https://vuldb.com/?ctiid.258678Permissions Required, VDB Entry
• https://vuldb.com/?id.258678Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.306958Third Party Advisory, VDB Entry

Published

Mar 30, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3083A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploi…8.3
• CVE-2024-3084A vulnerability was found in PHPGurukul Emergency Ambulance …6.1
• CVE-2024-30840A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 al…6.5
• CVE-2024-30845Cross Site Scripting vulnerability in Rainbow external link …6.1
• CVE-2024-30848Cross-site scripting (XSS) vulnerability in SilverSky E-mail…6.1
• CVE-2024-30849Arbitrary file upload vulnerability in Sourcecodester Comple…9.8
• CVE-2024-30850Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2024-30851Directory Traversal vulnerability in codesiddhant Jasmin Ran…6.5
• CVE-2024-30855DedeCMS v5.7 was discovered to contain a Cross-Site Request …8.8
• CVE-2024-30858netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /adm…9.8
• CVE-2024-30859netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /adm…8.8
• CVE-2024-3086A vulnerability classified as problematic was found in PHPGu…6.1