SQL Injection Vulnerability in Phpgurukul User Registration System
CVE-2023-40852

9.8CRITICAL

Key Information:

Vendor: User Registration \& Login And User Management System With Admin Panel Project
Status: User Registration \& Login And User Management System With Admin Panel
Vendor: CVE Published:; 16 October 2023

🔔 Create User Registration \& Login And User Management System With Admin Panel Project Vulnerability Alert

What is CVE-2023-40852?

The SQL Injection vulnerability in Phpgurukul's User Registration & Login and User Management System version 3.0 allows adversaries to exploit the admin login page. By submitting specially crafted input in the admin username field, attackers can access sensitive information stored in the database. This poses a significant risk, as unauthorized access to user data can lead to further exploitation or data breaches. It is crucial for users of this system to apply necessary patches and implement security measures to safeguard their applications.

References

https://www.exploit-db.com/exploits/51695

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 16, 2023
Vulnerability Reserved
Aug 22, 2023

CVE-2023-40852 Data

JSON