This is a technical writeup detailing a SQL injection vulnerability in TutorialMS v1.4. The vulnerability is in the 'show' parameter of the 'includes/classes/tutorial.php' script, which fails to sanitize user input before using it in SQL queries.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:TutorialMS v1.4
No auth needed
Prerequisites:Access to the vulnerable web application