CVE-2020-35427

https://notcve.org/view.php?id=CVE-2020-35427

SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication. Una vulnerabilidad de inyección SQL en PHPGurukul Employee Record Management System versión 1.1, permite a atacantes remotos ejecutar comandos SQL arbitrario y omitir una autenticación • https://phpgurukul.com https://www.exploit-db.com/exploits/49165 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •