What is CVE-2020-10106?

CVE-2020-10106 is a critical-severity vulnerability in Phpgurukul Daily_expense_tracker_system, classified under SQL Injection. CVSS score: 9.8/10. Published 2020-03-05.

How severe is CVE-2020-10106?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Phpgurukul Daily_expense_tracker_system

CVE-2020-10106

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt.

Vulnerability class: SQL Injection

EPSS: 0.012 (63.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Phpgurukul Daily_expense_tracker_system — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-10106?: CVE-2020-10106 is a critical-severity vulnerability in Phpgurukul Daily_expense_tracker_system, classified under SQL Injection. CVSS score: 9.8/10. Published 2020-03-05.
How severe is CVE-2020-10106?: Critical severity. CVSS v3 base score is 9.8 out of 10.