CVE-2024-5361

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /admin/normal-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266273 was assigned to this vulnerability.

CVSS v3.0 7.2 HIGH

7.2^/10

CVSS v3.0 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://vuldb.com/?ctiid.266273	Permissions Required VDB Entry
https://vuldb.com/?ctiid.266273	Permissions Required VDB Entry
https://vuldb.com/?id.266273	Permissions Required VDB Entry
https://vuldb.com/?id.266273	Permissions Required VDB Entry
https://vuldb.com/?submit.343886	VDB Entry
https://vuldb.com/?submit.343886	VDB Entry
https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/gotd8yz2e0ed9gof	Broken Link
https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/gotd8yz2e0ed9gof	Broken Link

Configurations

Configuration 1 (hide)

cpe:2.3:a:phpgurukul:zoo_management_system:2.1:*:*:*:*:*:*:*

History

21 Feb 2025, 19:28

Type	Values Removed	Values Added
CPE		cpe:2.3:a:phpgurukul:zoo_management_system:2.1:::::::*
First Time		Phpgurukul zoo Management System Phpgurukul
References	~~() https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/gotd8yz2e0ed9gof -~~	() https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/gotd8yz2e0ed9gof - Broken Link
References	~~() https://vuldb.com/?ctiid.266273 -~~	() https://vuldb.com/?ctiid.266273 - Permissions Required, VDB Entry
References	~~() https://vuldb.com/?id.266273 -~~	() https://vuldb.com/?id.266273 - Permissions Required, VDB Entry
References	~~() https://vuldb.com/?submit.343886 -~~	() https://vuldb.com/?submit.343886 - VDB Entry
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.2
CWE	~~CWE-89~~

26 May 2024, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-26 11:15

Updated : 2025-02-21 19:28

NVD link : CVE-2024-5361

Mitre link : CVE-2024-5361

JSON object : View

Products Affected

phpgurukul

zoo_management_system

CWE

No CWE.

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://vuldb.com/?ctiid.266273", "name": "VDB-266273 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["Permissions Required", "VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?ctiid.266273", "name": "VDB-266273 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["Permissions Required", "VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?id.266273", "name": "VDB-266273 | PHPGurukul Zoo Management System normal-bwdates-reports-details.php sql injection", "tags": ["Permissions Required", "VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?id.266273", "name": "VDB-266273 | PHPGurukul Zoo Management System normal-bwdates-reports-details.php sql injection", "tags": ["Permissions Required", "VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?submit.343886", "name": "Submit #343886 | PHPGurukul zoo-management-system version 2.1 SQL Injection", "tags": ["VDB Entry"], "refsource": ""}, {"url": "https://vuldb.com/?submit.343886", "name": "Submit #343886 | PHPGurukul zoo-management-system version 2.1 SQL Injection", "tags": ["VDB Entry"], "refsource": ""}, {"url": "https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/gotd8yz2e0ed9gof", "name": "https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/gotd8yz2e0ed9gof", "tags": ["Broken Link"], "refsource": ""}, {"url": "https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/gotd8yz2e0ed9gof", "name": "https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/gotd8yz2e0ed9gof", "tags": ["Broken Link"], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /admin/normal-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266273 was assigned to this vulnerability."}]}, "problemtype": {"problemtype_data": [{"description": []}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2024-5361", "ASSIGNER": "cna@vuldb.com"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}}, "publishedDate": "2024-05-26T11:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:phpgurukul:zoo_management_system:2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-02-21T19:28Z"}