CVE-2024-35511 PoC — PHPGurukul Men Salon Management System 安全漏洞

Source

https://github.com/efekaanakkar/CVE-2024-35511

Associated Vulnerability

Title:PHPGurukul Men Salon Management System 安全漏洞 (CVE-2024-35511)
Description:phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php.

Description

Men Salon Management System Using PHP and MySQL

Readme

# PHPGurukul Men Salon Management System 2.0
+ Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management.
## Security Vulnerabilities
### CVE-2024-35511
+ Description: Vulnerable to SQL Injection via 'username' parameter.
+ Affected Version: 2.0
+ Impact: Attackers can manipulate the 'username' parameter, potentially gaining unauthorized access.
+ Solution: Implement proper input validation and utilize parameterized queries

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!