Ashutosh Singh Umath

2 exploits Active since Oct 2023
CVE-2023-40852 EXPLOITDB CRITICAL text WRITEUP
User Registration & Login and User Management System With Admin Panel 3.0 - SQL Injection via Admin Username Field
SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.
CVSS 9.8
CVE-2023-40851 EXPLOITDB MEDIUM text WORKING POC
User Registration & Login System 3.0 - Stored XSS via Registration Form
Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page.
CVSS 5.4