CVE-2024-5357

A vulnerability has been found in PHPGurukul Zoo Management System 2.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266269 was assigned to this vulnerability.

CVSS v3.0 9.8 CRITICAL

9.8^/10

CVSS v3.0 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://vuldb.com/?ctiid.266269	Permissions Required VDB Entry
https://vuldb.com/?ctiid.266269	Permissions Required VDB Entry
https://vuldb.com/?id.266269	Permissions Required VDB Entry
https://vuldb.com/?id.266269	Permissions Required VDB Entry
https://vuldb.com/?submit.343372	Third Party Advisory VDB Entry
https://vuldb.com/?submit.343372	Third Party Advisory VDB Entry
https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/wzxsew2dfb84l3lo	Broken Link
https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/wzxsew2dfb84l3lo	Broken Link

Configurations

Configuration 1 (hide)

cpe:2.3:a:phpgurukul:zoo_management_system:2.1:*:*:*:*:*:*:*

History

21 Feb 2025, 19:48

Type	Values Removed	Values Added
First Time		Phpgurukul zoo Management System Phpgurukul
CPE		cpe:2.3:a:phpgurukul:zoo_management_system:2.1:::::::*
References	~~() https://vuldb.com/?id.266269 -~~	() https://vuldb.com/?id.266269 - Permissions Required, VDB Entry
References	~~() https://vuldb.com/?ctiid.266269 -~~	() https://vuldb.com/?ctiid.266269 - Permissions Required, VDB Entry
References	~~() https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/wzxsew2dfb84l3lo -~~	() https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/wzxsew2dfb84l3lo - Broken Link
References	~~() https://vuldb.com/?submit.343372 -~~	() https://vuldb.com/?submit.343372 - Third Party Advisory, VDB Entry
CWE	~~CWE-89~~
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8

26 May 2024, 08:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-26 08:15

Updated : 2025-02-21 19:48

NVD link : CVE-2024-5357

Mitre link : CVE-2024-5357

JSON object : View

Products Affected

phpgurukul

zoo_management_system

CWE

No CWE.

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://vuldb.com/?ctiid.266269", "name": "VDB-266269 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["Permissions Required", "VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?ctiid.266269", "name": "VDB-266269 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["Permissions Required", "VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?id.266269", "name": "VDB-266269 | PHPGurukul Zoo Management System forgot-password.php sql injection", "tags": ["Permissions Required", "VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?id.266269", "name": "VDB-266269 | PHPGurukul Zoo Management System forgot-password.php sql injection", "tags": ["Permissions Required", "VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?submit.343372", "name": "Submit #343372 | PHPGurukul zoo-management-system version 2.1 SQL Injection", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?submit.343372", "name": "Submit #343372 | PHPGurukul zoo-management-system version 2.1 SQL Injection", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": ""}, {"url": "https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/wzxsew2dfb84l3lo", "name": "https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/wzxsew2dfb84l3lo", "tags": ["Broken Link"], "refsource": ""}, {"url": "https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/wzxsew2dfb84l3lo", "name": "https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/wzxsew2dfb84l3lo", "tags": ["Broken Link"], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "A vulnerability has been found in PHPGurukul Zoo Management System 2.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266269 was assigned to this vulnerability."}]}, "problemtype": {"problemtype_data": [{"description": []}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2024-5357", "ASSIGNER": "cna@vuldb.com"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}}, "publishedDate": "2024-05-26T08:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:phpgurukul:zoo_management_system:2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-02-21T19:48Z"}