Web Security Insights By Maloy Roy Orko

Hi All,  I am Maloy Roy Orko . Recently in one of my pentest research, I found a Real Estate Management System application By Script And Tools which is an open source Real Estate Management System. It is made with PHP, MYSQL, JAVASCRIPT. Curious to explore its functionalities downloaded and set it up in my local system.  After fiddling with the source code, I found that it did not have any kind of security against Sql injection in the admin panel /admin/ . Anyone can use SQL Injection Admin Bypass Payloads and login in to admin panel! It can lead into: Malware Distribution Unauthorized Access  Data Breach Web Shell Installation Reputation Damage The Main Thing Is,If any NON-IT personal uses this template,he will fall into this vulnerability and his companies reputation can be lost too.Thats why I am trying to inform everyone about this. Title of the Vulnerability:  Script And Tools | Real Estate Management System 1.0 | SQL Injection Admin Bypass In /admin/ Vulnera...