CVE-2024-3088

Summary

CVE-2024-3088 is a newly disclosed critical vulnerability affecting the Forgot Password Page in the PHPGurukul Emergency Ambulance Hiring Portal 1.0. The issue lies within the /admin/forgot-password.php file and is triggered by manipulating the argument "username". This leads to SQL injection, granting an attacker remote access to the system. The vulnerability, identified as VDB-258681, has been made public and could be exploited. Users are strongly advised to update their systems as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.