CVE-2020-26051: SQL Injection
College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-26051?
CVE-2020-26051 has a medium severity rating due to the potential for unauthorized access to sensitive data through SQL injection.
How do I fix CVE-2020-26051?
To fix CVE-2020-26051, sanitize and parameterize SQL queries to ensure that user inputs in 'unametxt' and 'pwdtxt' are properly validated.
What systems are affected by CVE-2020-26051?
CVE-2020-26051 affects College Management System PHP version 1.0.
What are the potential impacts of CVE-2020-26051?
CVE-2020-26051 can allow attackers to execute arbitrary SQL queries, potentially leading to data leakage or corruption.
Is CVE-2020-26051 actively exploited in the wild?
There is no public information indicating that CVE-2020-26051 is actively exploited in the wild as of now.