Approved changes feed: RSS · Atom

cpe:2.3:a:vishnusivadas:login-signup:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorVishnusivadas (4771f397-a9a9-58eb-b800-72438b7072be)
ProductLogin Signup (48b202e4-0507-5431-b7a5-667bccf4a23b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-51092 vulnerable 2026-06-08 07:31:11.161932 Details available
The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn() and signUp() build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareData() function exists, it is insufficient to prevent SQL injection and does not sanitize the table name.
Published: 2025-08-22T00:00:00.000Z
Updated: 2025-08-26T14:07:07.229Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.