SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication.
References
Link | Resource |
---|---|
https://phpgurukul.com/ | Vendor Advisory |
https://systemweakness.com/cve-2020-25952-f60fff8ffac | Exploit Third Party Advisory |
https://th3cyb3rc0p.medium.com/cve-2020-25952-f60fff8ffac | Exploit Third Party Advisory |
https://www.exploit-db.com/exploits/49052 | Third Party Advisory VDB Entry |
https://phpgurukul.com/ | Vendor Advisory |
https://systemweakness.com/cve-2020-25952-f60fff8ffac | Exploit Third Party Advisory |
https://th3cyb3rc0p.medium.com/cve-2020-25952-f60fff8ffac | Exploit Third Party Advisory |
https://www.exploit-db.com/exploits/49052 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:19
Type | Values Removed | Values Added |
---|---|---|
References | () https://phpgurukul.com/ - Vendor Advisory | |
References | () https://systemweakness.com/cve-2020-25952-f60fff8ffac - Exploit, Third Party Advisory | |
References | () https://th3cyb3rc0p.medium.com/cve-2020-25952-f60fff8ffac - Exploit, Third Party Advisory | |
References | () https://www.exploit-db.com/exploits/49052 - Third Party Advisory, VDB Entry |
Information
Published : 2020-11-16 16:15
Updated : 2024-11-21 05:19
NVD link : CVE-2020-25952
Mitre link : CVE-2020-25952
CVE.ORG link : CVE-2020-25952
JSON object : View
Products Affected
user_registration_\&_login_and_user_management_system_project
- user_registration_\&_login_and_user_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')