| शीर्षक | Microfinance Management System 1.0 - Authentication Bypass (SQL Injection) |
|---|
| विवरण | # Exploit Title: Microfinance Management System 1.0 - Authentication Bypass (SQL Injection)
# Date: 23/03/2022
# Exploit Author: Mr Empy
# Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html
# Version: 1.0
# Tested on: Linux
Title:
================
Microfinance Management System 1.0 - Authentication Bypass (SQL Injection)
Summary:
================
Microfinance Management System version 1.0 is affected by a vulnerability that allows an attacker to bypass authentication. Due to the lack of SQL sanitization, the attacker is able to gain full access to the victim's account by injecting an SQL query.
Severity Level:
================
7.3 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Product:
================
Microfinance Management System v1.0
Steps to Reproduce:
================
1. Open your browser and go to the login page (http://target.com/mims/login.php).
2. In the username and password field, put the payload:
'||1=1# |
|---|
| स्रोत | ⚠️ https://www.sourcecodester.com/php/14822/microfinance-management-system.html |
|---|
| उपयोगकर्ता | mrempy (UID 24379) |
|---|
| सबमिशन | 23/03/2022 03:47 PM (5 साल पहले) |
|---|
| संयम | 24/03/2022 01:23 AM (10 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 195641 [SourceCodester Microfinance Management System 1.0 Login Page /mims/login.php username/password SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|