Description
E Learning Script 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard without valid credentials by manipulating login parameters. Attackers can exploit the /login.php file by sending a specific payload '=''or' to bypass authentication and gain unauthorized access to the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| amitkolloldey | elearning-script | 1.0 | — |
References
- ExploitDB-47811 exploit
- Vendor GitHub Repository product
- VulnCheck Advisory: elearning-script 1.0 - Authentication Bypass third-party-advisory