CVE-2024-10296 – PHPGurukul Medical Card Generation System Report of Medical Card Page card-bwdates-reports-details.php sql injection

https://notcve.org/view.php?id=CVE-2024-10296

A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/card-bwdates-reports-details.php of the component Report of Medical Card Page. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. • https://vuldb.com/?id.281563 https://vuldb.com/?ctiid.281563 https://vuldb.com/?submit.427400 https://phpgurukul.com • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •