Executive brief
A SQL injection vulnerability exists in the PHP-MYSQL-User-Login-System, a web application used for managing user authentication. An attacker can exploit this flaw to bypass the login screen without a valid password, gaining full administrative access to the system. This could lead to the theft of sensitive user data, unauthorized modification of records, or a complete takeover of the underlying database.
Technical details
A SQL injection vulnerability (CWE-89) exists in PHP-MYSQL-User-Login-System v1.0 due to the improper neutralization of the 'username' parameter in login.php. The application concatenates user input directly into a SQL query string without using prepared statements or parameterized queries. A remote, unauthenticated attacker can provide a malicious payload (e.g., ' OR '1'='1) to manipulate the query logic, resulting in a successful authentication bypass. This flaw grants the attacker administrative privileges and the ability to execute arbitrary SQL commands against the backend MySQL database. As of the disclosure date, no official patch is available.
Affected products
- keerti1924 PHP-MYSQL-User-Login-System 1.0
Timeline
- 2026-01-22: other: Vulnerability discovered
- 2026-04-10: disclosed: Public disclosure and CVE assigned