CVE-2024-13079
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Dec 31, 2024
Updated: Jan 6, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2024-13079 is a newly disclosed critical vulnerability impacting the PHPGurukul Land Record System version 1.0. The issue lies in an unidentified function of the file /admin/property-details.php, allowing for sql injection attacks. By manipulating the editid argument, an adversary can remotely exploit the vulnerability and execute malicious SQL queries. Public disclosure of the exploit increases the urgency for affected organizations to apply patches or mitigations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Phpgurukul Land Record System
Affected Vendors
- Phpgurukul