CVE-2024-33288

Prison Management System Using PHP v1.0 contains a SQL injection vulnerability within the username parameter on the Admin login page. An attacker can exploit this flaw to interfere with database queries and perform an authentication bypass to gain unauthorized administrative access. Proof-of-conc...

Prison Management System - SQL Injection Authentication Bypass Vulnerability

Exploit : Prison Management System Using PHP -SQL Injection Authentication Bypass Exploit Author: Sanjay Singh Vendor Homepage: https://www.sourcecodester.com Software Link:https://www.sourcecodester.com/sql/17287/prison-management-system.html Tested on: Windows ,XAMPP CVE : CVE-2024-33288 Proof ...