vendor:
Simple Food Website
by:
Viren Saroha (illusion)
7.5
CVSS
HIGH
Authentication Bypass
287
CWE
Product Name: Simple Food Website
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: NO
Related CWE: N/A
CPE: a:sourcecodester:simple_food_website:1.0
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 10/Kali Linux
2021
Simple Food Website 1.0 – Authentication Bypass
An authentication bypass vulnerability exists in Simple Food Website 1.0, which allows an attacker to gain access to the admin panel without valid credentials. This is due to the application not properly validating user input, allowing an attacker to inject malicious SQL code into the username field. By entering ' or '1'='1'# in the username field, an attacker can bypass authentication and gain access to the admin panel.
Mitigation:
Ensure that user input is properly validated and sanitized before being used in SQL queries.
