CVE-2024-3432 - CVE House
Back to Database
Status published Medium CVE-2024-3432

PuneethReddyHC Event Management register.php sql injection

Vulnerability Description

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument event_id/full_name/email/mobile/college/branch leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259613 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-3432

Credits & Attribution

No credits recorded in the NVD database.

References

More from PuneethReddyHC

View All →
CVE-2024-58316
Online Shopping System Advanced 1.0 SQL Injection via Payment Success Parameter
High 8.7
CVE-2024-3433
PuneethReddyHC Event Management register.php cross site scripting
Low 3.5
CVE-2023-3337
PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication
High 7.3
CVE-2023-3311
PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting
Low 2.4

Affected Vendor

PuneethReddyHC

View all reports →

Affected Software

Event Management
Vulnerable Versions:
1.0

Timeline

Official Publish: April 7th, 2024
Last Modified: February 26th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1213.006 Databases
Collection
T1485 Data Destruction
Impact