CVE-2023-40852

CRITICAL

User Registration & Login and User Management System v3.0 - SQL Injection (Unauthenticated)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-40852 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 16, 2024 · Source: CVE List

Proofs of concept

1

Catalogued exploits

ExploitDBUser Registration & Login and User Management System v3.0 - SQL Injection (Unauthenticated)ExploitDB exploitby Ashutosh Singh UmathNot analyzed1 file
ExploitDB
PoC details

References

2