CyberRota Analysis
AI-GeneratedThe vulnerability exists in the user login functionality of Miantang/IoT-PHP, where unsanitized user input allows for SQL injection through the password field. This critical flaw enables unauthenticated attackers to bypass authentication and potentially extract sensitive data from the database. Organizations using this software should prioritize remediation to mitigate the risk of unauthorized access and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from ['pwd'] with no sanitization and concatenates it into a raw SQL string: mysql_query("select * from userlists where username='' and password='' limit 1"). An unauthenticated attacker can submit a payload such as pwd=' OR '1'='1 to bypass authentication and, via UNION-based injection, extract arbitrary data from the database.