CyberRota Analysis
AI-GeneratedThe Stock-Inventory-Management-System's login.php is vulnerable to SQL injection due to the direct concatenation of user-supplied credentials into SQL queries without proper parameterization, allowing unauthenticated attackers to bypass authentication. Additionally, hardcoded administrative credentials within the script further enable attackers to gain full access to the system. Organizations using this application should prioritize immediate remediation to mitigate the risk of unauthorized access and potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.