CVE-2024-28323

MEDIUM

Phpgurukul User Registration & Login and User Management System 3.1 - SQL Injection via bwdates-report-result.php

Title source: llm

Description

The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection attacks.

References (2)

Core 2

Core References

Exploit

https://packetstormsecurity.com/files/177168/User-Registration-And-Login-And-User-Management-System-3.1-SQL-Injection.html

Exploit, Third Party Advisory

https://sospiro014.github.io/User-Registration-And-Login-And-User-Management-System-3.1-SQL-Injection

Scores

CVSS v3 6.5

EPSS 0.0015

EPSS Percentile 34.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-89

Status published

Products (1)

phpgurukul/user_registration_\&_login_and_user_management_system 3.1

Published Mar 14, 2024

Tracked Since Feb 18, 2026