| शीर्षक | SourceCodester Human resource management system 1.0 SQL Injection |
|---|
| विवरण | A SQL Injection vulnerability was identified in the login functionality of the Human Resources Management System version 1.0. The application fails to properly sanitize user-supplied input before processing SQL queries.
An attacker can exploit this vulnerability by injecting crafted SQL statements into the authentication parameters, allowing the login mechanism to be bypassed without valid credentials. Successful exploitation results in unauthorized access to the administrative dashboard and privileged functionality.
The vulnerability affects the confidentiality, integrity, and availability of the application. An attacker with administrative access may be able to view, modify, or delete sensitive employee records, organizational information, and other restricted data.
The issue can be exploited remotely without requiring prior authentication. The attack complexity is low because only a specially crafted login request is required. This vulnerability may lead to privilege escalation, unauthorized data access, data manipulation, and complete compromise of the affected application.
Vendor notification was performed prior to public disclosure. Additional technical details, proof-of-concept information, and screenshots are available in the referenced advisory. |
|---|
| स्रोत | ⚠️ https://medium.com/@hemantrajbhati5555/sql-injection-authentication-bypass-leading-to-unauthorized-admin-access-in-human-resource-bc6121cf6320 |
|---|
| उपयोगकर्ता | Hemant Raj Bhati (UID 95613) |
|---|
| सबमिशन | 21/06/2026 04:50 PM (3 महीनों पहले) |
|---|
| संयम | 07/08/2026 10:41 AM (2 months later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 213799 [SourceCodester Human Resource Management System 1.0 login.php name/password SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|