CVE-2024-57687: Phpgurukul Land Record System

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter.

Affected products

Published 2025-01-10. Last modified 2026-06-17.