WebDamn User Registration & Login System with User Panel – SQLi Auth Bypass

• Exploit Database
• 216 阅读

• 作者： Aakash Madaan
  日期： 2020-12-02
• 类别：

  • webapps
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/49170/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

  # Exploit Title: WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass # Date: 18-11-2020 # Exploit Author: Aakash Madaan # Vendor Homepage: https://webdamn.com/ # Software Link : https://webdamn.com/user-management-system-with-php-mysql/ # Version: N/A (Default) # Tested on: Windows 10 professional   Steps to reproduce: 1. Open user login page using following URl: -> http://localhost/login.php <http://localhost/login.html>   2. If attacker get access to valid email address ( leaked data or by any other means) then he/she can use the email address as follows: Payload: <email>&apos; OR &apos;1&apos;=&apos;1 NOTE: Use the above payload in both username and password fields   3. Server accepts the payload and the attacker is able to bypass the user login panel with only email address.