This exploit demonstrates an authentication bypass via SQL injection in SitePal v1.1. The provided credentials ('admin' and 'X' or ' 1=1--') bypass authentication by manipulating the SQL query logic.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:SitePal v1.1
No auth needed
Prerequisites:Access to the login page of SitePal v1.1