Skip to content
PrivacyMedium

CVE-2020-10106: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the e…

Occurred
Mar 5, 2020
Published
Mar 5, 2020
Source
NVD CVE

Summary

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt.

Tags

  • CVE
  • CVE-2020-10106
  • cvss:CRITICAL

Classification

Category confidence: 90%
Severity confidence: 85%

Rationale: SQL injection vulnerability allows unauthorized database access and data exfiltration.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source