Unrated severityNVD Advisory· Published Mar 5, 2020· Updated Aug 4, 2024

CVE-2020-10106

Description

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt.

Affected products

PHPGurukul/Daily Expense Tracker Systemdescription
Phpgurukul/Daily Expense Tracking Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

frostylabs.net/writeups/cve-2020-10106/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000