| tiêu đề | Project Worlds Life Insurance Management System unknown Login Bypass via SQL injection |
|---|
| Mô tả | ### **Vendor and Product Information:**
- **Vendor:** Project Worlds
- **Product:** Life Insurance Management System
- **Product URL:** [Life Insurance Management System](https://projectworlds.in/life-insurance-management-system-in-php/)
### **Executive Summary:**
A SQL injection vulnerability has been identified in the login mechanism of the application. This vulnerability allows an attacker to bypass authentication and gain unauthorized access to user accounts. The vulnerability was discovered during security testing, and this report provides details on the issue, its impact, and recommended remediation steps.
The vulnerability can be exploited using the following payload in the **`username` and password** `parameter` as follow:
username: ' union select 'torada
password: torada |
|---|
| Người dùng | torada (UID 61170) |
|---|
| Đệ trình | 28/01/2024 21:16 (cách đây 3 những năm) |
|---|
| Kiểm duyệt | 29/01/2024 14:39 (17 hours later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 234244 [SourceCodester Life Insurance Management System 1.0 login.php username Tiêm SQL] |
|---|
| điểm | 0 |
|---|