CVE-2020-25952

https://notcve.org/view.php?id=CVE-2020-25952

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication. Una vulnerabilidad de inyección SQL en el panel de administración de PHPGurukul User Registration & Login and User Management System With versión 2.1, permite a atacantes remotos ejecutar comandos SQL arbitrarios y omitir la autenticación • https://phpgurukul.com https://systemweakness.com/cve-2020-25952-f60fff8ffac https://th3cyb3rc0p.medium.com/cve-2020-25952-f60fff8ffac https://www.exploit-db.com/exploits/49052 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •