CVE-2024-53603

Summary

CVE-2024-53603 is a SQL Injection vulnerability affecting the PHPGurukul COVID 19 Testing Management System v1.0. The issue lies in the /covid-tms/password-recovery.php file, where a POST request containing malicious SQL code can be injected through the contactno parameter. Successful exploitation allows remote attackers to execute arbitrary code, posing a significant security risk. Organizations using this software version are advised to apply the necessary patches or updates as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.