Lucene search

[email protected]CVE-2020-25952

HistoryNov 16, 2020 - 4:15 p.m.

CVE-2020-25952

2020-11-1616:15:14

CWE-89

[email protected]

web.nvd.nist.gov

cve

2020

25952

sql injection

phpgurukul

user registration

user management system

admin panel

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.095 Low

EPSS

Percentile

94.8%

JSON

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication.

Affected configurations

NVD

Node

user_registration_\&_login_and_user_management_system_projectuser_registration_\&_login_and_user_management_systemMatch2.1

CPENameOperatorVersion
user_registration_\&_login_and_user_management_system_project:user_registration_\&_login_and_user_management_systemuser registration & login and user management system project user registration & login and user management systemeq2.1

CPE	Name	Operator	Version
user_registration_\&_login_and_user_management_system_project:user_registration_\&_login_and_user_management_system	user registration & login and user management system project user registration & login and user management system	eq	2.1

References

phpgurukul.com/

systemweakness.com/cve-2020-25952-f60fff8ffac

th3cyb3rc0p.medium.com/cve-2020-25952-f60fff8ffac

www.exploit-db.com/exploits/49052

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.095 Low

EPSS

Percentile

94.8%

JSON

Related for CVE-2020-25952

nvd1 prion1 checkpoint_advisories1 cvelist1