Jettweb PHP Hazir Haber Sitesi Script Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in Jettweb PHP Hazir Haber Sitesi Scripti V2. This vulnerability allows unauthenticated attackers to gain administrative access by exploiting improper validation of SQL queries in the login form of the administration panel. Attackers can inject SQL payloads into the username and password fields to bypass authentication and access the admin interface.

Impact

Exploitation of this vulnerability allows for unauthorized administrative access to the application.

Reproduction

To reproduce this vulnerability, navigate to the administration login page and enter a crafted SQL injection payload in the username and password fields. The injected SQL will be executed by the application, bypassing authentication and granting access to the administrative panel.