← Database

CVE-2024-55099

CRITICAL CVSS: 9.8 Published: 2024-12-12 Modified: 2026-06-17

Description

A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username parameter.

Affected Platforms

Phpgurukul Online Nurse Hiring System

Weakness Type

CWE-89

References