CVE-2020-29228
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page. An attacker can manipulate input fields to execute unauthorized SQL queries against the database.
Risk Assessment
The risk includes unauthorized access to user accounts, theft of credentials, and potential takeover of the admin panel. This could lead to data confidentiality and integrity breaches.
Recommendation
Immediately update the system to the latest version or apply a patch that fixes the SQL injection vulnerability. Additionally, implement input validation and use prepared statements.
Other vulnerabilities in EGavilanMedia User Registration and Login System With Admin Panel
See all- CVE-2020-29231Medium
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is vulnerable to cross-site scripting (XSS) in the Admin Profile Page. An attacker can inject a malicious JavaScript payload into the 'Admin Full Name' field, which triggers every time the admin visits the profile page.
- CVE-2020-29230Medium
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is vulnerable to cross-site scripting (XSS) in the Admin Panel - Manage User tab via the Full Name field. An attacker can inject a malicious JavaScript payload during user registration, which triggers when the admin visits the manage user section, potentially stealing session cookies.
Original NVD description (English source)
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page.