CVE-2024-3771

Summary

CVE-2024-3771 is a newly disclosed critical vulnerability affecting the PHPGurukul Student Record System 3.20. The issue lies in an unknown functionality of the file /edit-subject.php, which can be exploited through malicious manipulation of the arguments sub1/sub2/sub3/sub4/udate. This vulnerability enables attackers to inject SQL queries, potentially leading to unauthorized access, data theft, or system compromise. The exploit has been made public, increasing the risk of successful attacks. VDB-260618 is the identifier assigned to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.