CVE-2020-36945
HIGHWebDamn User Registration Login System - SQL Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-36945. PoCs published by Aakash Madaan.
AI-analyzed exploit summary This exploit describes an SQL injection authentication bypass vulnerability in WebDamn User Registration & Login System. The payload ' OR '1'='1 can be used in both username and password fields to bypass authentication if a valid email address is known.
Description
WebDamn User Registration Login System contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating email credentials. Attackers can inject the payload '<email>' OR '1'='1' in both username and password fields to gain unauthorized access to the user panel.
Exploits (1)
This exploit describes an SQL injection authentication bypass vulnerability in WebDamn User Registration & Login System. The payload ' OR '1'='1 can be used in both username and password fields to bypass authentication if a valid email address is known.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N