Part-DB Authentication Bypass Vulnerability in Login.php

An authentication bypass vulnerability has been identified in Part-DB version 0.4. This vulnerability allows unauthenticated attackers to log in by injecting SQL syntax into the authentication parameters. By submitting a single quote followed by 'or' in the login form, attackers can bypass credential validation and gain unauthorized access to the application.

Impact

Exploitation of this vulnerability allows for unauthorized access to the application, bypassing the authentication mechanism.

Reproduction

To reproduce this vulnerability, send a POST request to the 'login.php' endpoint. Include a payload that injects SQL syntax, specifically a single quote followed by 'or', into the authentication parameters. This injection will bypass the normal credential validation process, allowing access to the application without proper authentication.

Remediation

Users are advised to update to Part-DB version 1.0.0 or later, as this vulnerability has been addressed in the newer version.