PT-2026-5152 · Webdamn.Com · Webdamn User Registration & Login System With User Panel

Aakash Madaan · CVE-2020-36945 · Published 2026-01-28 · Updated 2026-01-28

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions WebDamn (affected versions not specified)

Description The user registration and login system contains a SQL injection flaw, which is a technique where malicious SQL statements are inserted into entry fields for execution. This allows unauthenticated attackers to bypass login authentication by manipulating email credentials. By injecting the payload '' OR '1'='1' into the username and password fields, an attacker can gain unauthorized access to the user panel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-36945

Affected Products

Webdamn User Registration & Login System With User Panel

References · 5

• 🔥 https://exploit-db.com/exploits/49170 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36945 · Security Note
• https://webdamn.com/user-management-system-with-php-mysql · Note
• https://webdamn.com · Note
• https://vulncheck.com/advisories/webdamn-user-registration-login-system-with-user-panel-sqli-auth-bypass · Note