CVE-2018-25201 - Vulnerability Analysis

Overview

School Management System CMS 1.0 contains an sql injection caused by improper sanitization of the username parameter in admin login functionality, letting attackers bypass authentication via boolean-based blind SQL injection, exploit requires crafted payload to processlogin endpoint.

Severity & Score

Impact

Attackers can bypass authentication and gain administrator access without valid credentials.

Mitigation

Update to the latest version with SQL injection fixes.

References

• https://www.exploit-db.com/exploits/44727
• https://www.vulncheck.com/advisories/school-management-system-cms-admin-login-sql-injection
• https://www.wecodex.com/item/view/school-management-system-in-php-and-mysql/5

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner