CVE-2020-10106

CWE-89 — SQL Injection3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.1%
top 70.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Daily Expense Tracker System
Timeline
PublishedMar 5
Latest updateMay 24

Description

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xvvh-54m6-j663: PHPGurukul Daily Expense Tracker System 1↗2022-05-24
▶
CVEList
CVE-2020-10106: PHPGurukul Daily Expense Tracker System 1↗2020-03-05
▶
CVE-2020-10106 (CRITICAL CVSS 9.8) | PHPGurukul Daily Expense Tracker Sy | cvebase.io