CVE-2022-29009.txt

> [Suggested description]
> Multiple SQL injection vulnerabilities via the username and password
> parameters in the Admin panel of Cyber Cafe Management System Project
> v1.0 allows attackers to bypass authentication.
>
> ------------------------------------------
>
> [Vulnerability Type]
> SQL Injection
>
> ------------------------------------------
>
> [Vendor of Product]
> Cyber Cafe Management System Project (CCMS) 1.0 - SQL Injection Authentication Bypass
>
> ------------------------------------------
>
> [Affected Product Code Base]
> https://phpgurukul.com/cyber-cafe-management-system-using-php-mysql/ - V 1.0
>
> ------------------------------------------
>
> [Affected Component]
> /ccms/index.php
>
> ------------------------------------------
>
> [Attack Type]
> Local
>
> ------------------------------------------
>
> [Impact Code execution]
> true
>
> ------------------------------------------
>
> [Attack Vectors]
> Go to Admin Login Panel and try to bypass login. #username : ' OR 1 -- - password : ccms
>
> ------------------------------------------
>
> [Reference]
> https://www.exploit-db.com/exploits/50355
>
> ------------------------------------------
>
> [Discoverer]
> sanjay singh

Use CVE-2022-29009