VehicleWorkshop - Authentication Bypass Vulnerability

ID 1337DAY-ID-28226
Type zdt
Reporter Touhid M.Shaikh
Modified 2017-08-01T00:00:00


Exploit for php platform in category web applications

                                            [*] Type: Admin or Customer login bypass via SQL injection
[*] Author: Touhid M.Shaikh
[*] Vendor Homepage:
[*] Mail: touhidshaikh22[at]gmail[dot]com
[*] More info:
===================== PoC ================
Admin Login Page :
Customer Login Page :
Navigate admin login page or Customer Login Page and submit ' OR 1 --+ for
username and password
and it should give you access to the admin area or Customer Area.
Touhid Shaikh

# [2018-03-02]  #