Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-47848. PoCs published by sigeri94.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass via SQL injection in Blitar Tourism 1.0. The payload manipulates the username parameter to bypass login by injecting a SQL comment, effectively neutralizing the password check.
Description
Blitar Tourism 1.0 contains an authentication bypass vulnerability that allows attackers to bypass login by injecting SQL code through the username parameter. Attackers can manipulate the login request by sending a crafted username with SQL injection techniques to gain unauthorized administrative access.
Exploits (1)
This exploit demonstrates an authentication bypass via SQL injection in Blitar Tourism 1.0. The payload manipulates the username parameter to bypass login by injecting a SQL comment, effectively neutralizing the password check.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N