Jettweb PHP Hazir Haber Sitesi Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in Jettweb PHP Hazir Haber Sitesi Scripti V1. This vulnerability allows unauthenticated attackers to gain administrative access by exploiting improper validation of SQL queries in the admingiris.php login form. Attackers can inject SQL payloads into the username and password fields to bypass authentication and access the administration panel.

Impact

Exploitation of this vulnerability allows for unauthorized administrative access to the application.

Reproduction

To reproduce this vulnerability, inject SQL payloads into the username and password fields of the admingiris.php login form. The injected SQL can be crafted to bypass authentication and gain access to the administrative interface.