User Registration Login And User Management System
CVE-2020-25952
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication.
AnalysisAI
SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication. Affected products include: Phpgurukul User Registration \& Login And User Management System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.
A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /login
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-res
A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Manag
A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Managemen
A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Manageme
A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3.
A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System
A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. Rated medium severity
The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a pot
A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management
Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management System 1.0 allows attacke
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site Request Forgery (CSRF) v
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today