CVE-2020-10106: SQL Injection
Published Mar 5, 2020
·Updated
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt.
Affected Software
1 affected component
Phpgurukul Daily Expense Tracker System=1.0
Event History
Mar 5, 2020
CVE Published
via MITRE·12:42 PM
Data Sourced
via MITRE·12:42 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this exploit?
The vulnerability ID for this exploit is CVE-2020-10106.
2
What is the severity of CVE-2020-10106?
CVE-2020-10106 has a severity rating of 9.8 (Critical).
3
What is the affected software?
The affected software is PHPGurukul Daily Expense Tracker System version 1.0.
4
How can the SQL injection vulnerability be exploited?
The SQL injection vulnerability can be exploited by using a specially crafted email parameter in either the index.php or register.php files.
5
Are there any known fixes for this vulnerability?
Unfortunately, there are no known fixes or patches available for CVE-2020-10106 at this time. It is recommended to follow best practices in secure coding to mitigate the risk.