CVE-2020-10106

9.8 criticalEPSS 1.2%

Critical (9.8) in phpgurukul daily expense tracker system. EPSS 1.2% chance of exploitation in the next 30 days.

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpgurukul:daily_expense_tracker_system

References

https://frostylabs.net/writeups/cve-2020-10106/
https://frostylabs.net/writeups/cve-2020-10106/

Check your stack JSON