[{"vendor":"phpgurukul","product":"boat_booking_system","defaultStatus":"unknown","cpes":["cpe:2.3:a:phpgurukul:boat_booking_system:*:*:*:*:*:*:*:*"],"versions":[{"version":"1.0","status":"affected"}]}]

{"timestamp":"2024-10-22T14:30:36.756467Z","id":"CVE-2024-10157","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"PHPGurukul","product":"Boat Booking System","modules":["Reset Your Password Page"],"versions":[{"version":"1.0","status":"affected"}]}]

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument username/mobileno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CWE-74

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

OR
     *cpe:2.3:a:phpgurukul:boat_booking_system:1.0:*:*:*:*:*:*:*

https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_admin_password_recovery_sqli.md No Types Assigned

https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_admin_password_recovery_sqli.md Exploit, Third Party Advisory

https://phpgurukul.com/ No Types Assigned

https://phpgurukul.com/ Product

https://vuldb.com/?ctiid.280943 No Types Assigned

https://vuldb.com/?ctiid.280943 Permissions Required, Third Party Advisory, VDB Entry

https://vuldb.com/?id.280943 No Types Assigned

https://vuldb.com/?id.280943 Third Party Advisory, VDB Entry

https://vuldb.com/?submit.425399 No Types Assigned

https://vuldb.com/?submit.425399 Third Party Advisory, VDB Entry

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

VulDB CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

VulDB AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

VulDB (AV:N/AC:L/Au:N/C:P/I:P/A:P)

VulDB CWE-89

VulDB https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_admin_password_recovery_sqli.md [No types assigned]

VulDB https://phpgurukul.com/ [No types assigned]

VulDB https://vuldb.com/?ctiid.280943 [No types assigned]

VulDB https://vuldb.com/?id.280943 [No types assigned]

VulDB https://vuldb.com/?submit.425399 [No types assigned]