CVE-2024-5360

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/foreigner-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266272.

• CWE-89

• https://vuldb.com/?ctiid.266272Permissions Required, VDB Entry
• https://vuldb.com/?id.266272Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.343722Third Party Advisory, VDB Entry
• https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/owcaryw2yqlk5x2aBroken Link
• https://vuldb.com/?ctiid.266272Permissions Required, VDB Entry
• https://vuldb.com/?id.266272Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.343722Third Party Advisory, VDB Entry
• https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/owcaryw2yqlk5x2aBroken Link

Published

May 26, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53588A DLL hijacking vulnerability in iTop VPN v16.0 allows attac…7.8
• CVE-2024-53589GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD…8.4
• CVE-2024-5359A vulnerability was found in PHPGurukul Zoo Management Syste…9.8
• CVE-2024-53591An issue in the login page of Seclore v3.27.5.0 allows attac…9.8
• CVE-2024-53597masterstack_imgcap v0.0.1 was discovered to contain a SQL in…6.3
• CVE-2024-53599A cross-site scripting (XSS) vulnerability in the /scroll.ph…5.4
• CVE-2024-53603A SQL Injection vulnerability was found in /covid-tms/passwo…7.3
• CVE-2024-53604A SQL Injection vulnerability was found in /covid-tms/check_…9.8
• CVE-2024-53605Incorrect access control in the component content://com.hand…7.5
• CVE-2024-5361A vulnerability was found in PHPGurukul Zoo Management Syste…7.2
• CVE-2024-53614A hardcoded decryption key in Thinkware Cloud APK v4.3.46 al…6.5
• CVE-2024-53615A command injection vulnerability in the video thumbnail ren…6.5