CVE-2024-34987

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-34987
A SQL Injection vulnerability exists in the `ofrs/admin/index.php` script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process.
CVSS

No CVSS.

References
Link Resource
https://github.com/MarkLee131/PoCs/blob/main/CVE-2024-34987.md Exploit Third Party Advisory
https://github.com/MarkLee131/PoCs/blob/main/CVE-2024-34987.md Exploit Third Party Advisory
https://www.exploit-db.com/exploits/51989 Exploit Third Party Advisory
https://www.exploit-db.com/exploits/51989 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:phpgurukul:online_fire_reporting_system:1.2:*:*:*:*:*:*:*
History

03 Apr 2025, 00:18

Type Values Removed Values Added
First Time Phpgurukul
Phpgurukul online Fire Reporting System
CPE cpe:2.3:a:phpgurukul:online_fire_reporting_system:1.2:*:*:*:*:*:*:*
References () https://www.exploit-db.com/exploits/51989 - () https://www.exploit-db.com/exploits/51989 - Exploit, Third Party Advisory
References () https://github.com/MarkLee131/PoCs/blob/main/CVE-2024-34987.md - () https://github.com/MarkLee131/PoCs/blob/main/CVE-2024-34987.md - Exploit, Third Party Advisory

18 Jun 2024, 19:15

Type Values Removed Values Added
References
  • () https://www.exploit-db.com/exploits/51989 -

03 Jun 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-03 20:15

Updated : 2025-04-03 00:18

NVD link : CVE-2024-34987

Mitre link : CVE-2024-34987

JSON object : View

Products Affected

phpgurukul

  • online_fire_reporting_system
CWE

No CWE.