{"id":"CVE-2023-40852","aliases":["EUVD-2023-45392","GHSA-f5v4-cqgf-pfvv"],"status":"published","title":"SQL Injection vulnerability in Phpgurukul User Registration \u0026 Login and User Management System...","description":"SQL Injection vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00947,"percentile":0.61464,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-10-16T00:00:00Z","modified":"2026-06-17T06:19:44Z","products":[{"vendor":"user_registration_\\\u0026_login_and_user_management_system_with_admin_panel_project","product":"user_registration_\\\u0026_login_and_user_management_system_with_admin_panel"}],"references":[{"url":"https://www.exploit-db.com/exploits/51695","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40852"},{"url":"https://github.com/advisories/GHSA-f5v4-cqgf-pfvv"}],"sources":{"cve":[{"id":"CVE-2023-40852","description":"SQL Injection vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.","status":"published","published":"2023-10-16T00:00:00Z","modified":"2024-09-16T19:56:50.349Z","updated_at":"2026-11-02T14:35:22.309324Z"}],"euvd":[{"id":"EUVD-2023-45392","description":"SQL Injection vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.","status":"published","published":"2023-10-16T00:00:00Z","modified":"2024-09-16T19:56:50Z","updated_at":"2026-11-03T00:55:18.167658Z"}],"ghsa":[{"id":"GHSA-f5v4-cqgf-pfvv","title":"SQL Injection vulnerability in Phpgurukul User Registration \u0026 Login and User Management System...","description":"SQL Injection vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.","status":"published","published":"2023-10-16T21:30:27Z","modified":"2024-04-04T08:42:10Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:57:00.717739Z"}],"nvd":[{"id":"CVE-2023-40852","description":"SQL Injection vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.","status":"published","published":"2023-10-16T21:15:10.867Z","modified":"2026-06-17T06:19:44.95Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:08:37.83429Z"}]}}