Needyamin Library Card System SQL Injection Vulnerability in Admin Panel

A critical SQL injection vulnerability has been identified in the Needyamin Library Card System version 1.0. The issue arises in the Admin Panel, specifically within the 'admindashboard.php' file. The vulnerability allows remote attackers to manipulate the 'email' and 'password' arguments, leading to unauthorized database access. This flaw could be exploited to bypass authentication and gain access to the admin dashboard.

Impact

Exploitation of this vulnerability could result in unauthorized access to the admin panel, allowing attackers to manipulate data or perform administrative functions. Additionally, this vulnerability could be combined with other attacks to enhance their effectiveness.

Reproduction

To reproduce this vulnerability, access the admin login page and inject SQL payloads into the email or password fields to bypass authentication. Once logged in, navigate to the admin dashboard.