Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPGurukul Billing System 安全漏洞
Vulnerability Description
PHPGurukul Billing System是PHPGurukul公司的一个计费系统。 PHPGurukul Billing System 1.0版本存在安全漏洞,该漏洞源于/admin/password-recovery.php中的username和mobileno参数未经验证,可能导致SQL注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A