PT-2025-34487 · Vishnusivadasvs · Login-Signup

Abimelsbk · Published 2025-08-22 · Updated 2025-08-23 · CVE-2025-51092

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: LogIn-SignUp project by VishnuSivadasVS (affected versions not specified)

Description: The LogIn-SignUp project is susceptible to SQL Injection due to the construction of SQL queries in the DataBase.php file. The logIn() and signUp() functions directly concatenate user input and unvalidated table names into SQL queries, bypassing the use of prepared statements. The existing prepareData() function does not adequately prevent SQL injection as it fails to sanitize the table name.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-51092

Affected Products

Login-Signup

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-51092 · Security Note
• https://twitter.com/CVEnew/status/1958974286250877287 · Twitter Post
• https://abimelsbk.hashnode.dev/sql-injection-vulnerability-at-login-signup-php-project · Note
• https://twitter.com/abimelsbk/status/1959020803997225286 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1959095748445769894 · Twitter Post
• https://t.me/CVEtracker/30725 · Telegram Post