Security
Headlines
HeadlinesLatestCVEs

Headline

Prison Management System Using PHP SQL Injection

Prison Management System Using PHP suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Packet Storm
#sql#vulnerability#windows#php#auth
# Exploit : Prison Management System Using PHP -SQL Injection Authentication Bypass# Date: 15/03/2024# Exploit Author: Sanjay Singh# Vendor Homepage: https://www.sourcecodester.com# Software Link:https://www.sourcecodester.com/sql/17287/prison-management-system.html# Tested on: Windows ,XAMPP# CVE : CVE-2024-33288# Proof of Concept:Step 1-Visit http://localhost/prison/Step 2 - Click on Admin Dashboard button and redirect on login page.Step 3– Enter username as admin' or '1'='1 and password as 123456Step 4 – Click sing In and now you will be logged in as admin.

Packet Storm: Latest News

Ubuntu Security Notice USN-7102-1