| عنوان | phpgurukul.com User Registration & Login and User Management System With admin panel V1.0 SQL Injection Vulnerability |
|---|
| الوصف | SQL Injection Root Cause
A SQL injection vulnerability was discovered in the "/signup.php" file within the "phpgurukul User Registration & Login and User Management System With admin panel" project. The reason for this issue is that after the attacker logs in with valid credentials, they can inject malicious code into the parameter "email". The application fails to properly escape or validate this input before using it in the SQL query. This allows the attacker to modify the SQL query and perform unauthorized operations. Impact
Attackers can take advantage of this SQL injection vulnerability to achieve unauthorized database access, leakage of sensitive data, data tampering, full system control, and even service interruption, posing a serious threat to system security and business continuity.
Description
During the security review of "phpgurukul User Registration & Login and User Management System With admin panel", a critical SQL injection vulnerability was identified. This vulnerability exists in the "/signup.php" file. The vulnerability arises from insufficient validation of the 'email' parameter by the user. After an attacker logs in using valid login credentials, they can inject malicious SQL queries through this parameter. Immediate remedial measures must be taken to ensure system security and protect data integrity. |
|---|
| المصدر | ⚠️ https://github.com/Bai-public/CVE/issues/10 |
|---|
| المستخدم | Mountain Ghost (UID 92943) |
|---|
| ارسال | 14/07/2026 04:22 AM (3 أشهر منذ) |
|---|
| الاعتدال | 29/08/2026 06:16 PM (2 months later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 286191 [PHPGurukul User Registration & Login and User Management System /signup.php حقن SQL] |
|---|
| النقاط | 0 |
|---|