SourceCodester Employee Management System Default Credentials Vulnerability

A critical vulnerability exists in SourceCodester Employee Management System version 1.0, specifically within the login functionality of index.php. The issue arises from the use of default credentials, allowing remote authentication bypass. Exploitation involves manipulating the username and password fields to gain unauthorized access.

Impact

Successful exploitation allows users to log in with default credentials, bypassing authentication.

Reproduction

To reproduce this vulnerability, navigate to the login page of the Employee Management System. Enter 'admin' as the username and 'admin123' as the password. Submit the login form to gain access to the system.