SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.
References
| Link | Resource |
|---|---|
| https://www.exploit-db.com/exploits/51695 | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
20 Oct 2023, 11:34
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:user_registration_\&_login_and_user_management_system_with_admin_panel_project:user_registration_\&_login_and_user_management_system_with_admin_panel:3.0:*:*:*:*:*:*:* | |
| CWE | CWE-89 | |
| References | (MISC) https://www.exploit-db.com/exploits/51695 - Exploit, Third Party Advisory, VDB Entry | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
User Registration \& Login And User Management System With Admin Panel Project user Registration \& Login And User Management System With Admin Panel
User Registration \& Login And User Management System With Admin Panel Project |
17 Oct 2023, 12:38
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-16 21:15
Updated : 2023-10-20 11:34
NVD link : CVE-2023-40852
Mitre link : CVE-2023-40852
JSON object : View
Products Affected
user_registration_\&_login_and_user_management_system_with_admin_panel_project
- user_registration_\&_login_and_user_management_system_with_admin_panel
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')