vendor:
Bank Locker Management System
by:
SoSPiro
6.1
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Bank Locker Management System
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE: a:bank_locker_management_system
Platforms Tested: Windows 10 64 bit Wampserver
2023
Bank Locker Management System – SQL Injection
A critical SQL Injection vulnerability was found in the Bank Locker Management System application, allowing an attacker to bypass authentication and gain unauthorized access to the system. By injecting 'admin' or '1'='1-- -' in the login and password fields, an attacker can access the application with administrative privileges.
Mitigation:
To mitigate this vulnerability, it is recommended to sanitize user inputs, use parameterized queries, and implement proper input validation to prevent SQL injection attacks.
