| शीर्षक | PHPGurukul Small Customer Relationship Management v4.0 SQL Injection |
|---|
| विवरण | A SQL injection vulnerability in the login functionality of the CRM application allows unauthenticated attackers to bypass authentication by injecting malicious SQL code into the username and password parameter. The application fails to properly sanitise user input before incorporating it into SQL queries, enabling attackers to manipulate the query logic using payloads such as 1 'or' 1=1--
An attacker can exploit this vulnerability to:
Bypass authentication and gain unauthorised access to the application
Obtain administrative privileges without valid credentials
Extract, modify, or delete sensitive data from the database
Execute arbitrary SQL commands on the underlying database server
Compromise the confidentiality, integrity, and availability of the entire system |
|---|
| स्रोत | ⚠️ https://github.com/rsecroot/Small-Customer-Relationship-Management-CRM-in-PHP/blob/main/Authentication%20Bypass%20%5BSQL%5D.md |
|---|
| उपयोगकर्ता | hackerfactory (UID 85869) |
|---|
| सबमिशन | 27/12/2025 03:53 PM (9 महीनों पहले) |
|---|
| संयम | 28/12/2025 02:18 PM (22 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 289662 [PHPGurukul Small CRM 1.0 /admin/index.php email SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|