Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-36945

WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass

Description

WebDamn User Registration Login System contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating email credentials. Attackers can inject the payload '<email>' OR '1'='1' in both username and password fields to gain unauthorized access to the user panel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WEBDAMN.COM WebDamn User Registration & Login System with User Panel

  • N/A (Default)affected

References