Teampel SQL Injection Vulnerability in Login Page

A SQL injection vulnerability has been identified in Teampel version 5.1.6, specifically within the login page. The issue arises in the user input fields, where crafted input can manipulate SQL queries. For instance, entering a specific payload in the username field can bypass authentication and gain access to the backend. This vulnerability exploits improper input validation, allowing attackers to execute arbitrary SQL commands.

Impact

Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized data access or manipulation. Additionally, according to the vulnerability reference, successful exploitation could allow an attacker to access the backend system.

Reproduction

To reproduce this vulnerability, navigate to the login page of Teampel 5.1.6. In the username field, enter a crafted SQL payload that exploits the application's SQL query handling. For example, input a payload that includes SQL injection techniques, such as bypassing authentication checks. Leave the password field blank or enter any value. After submitting the form, access to the backend should be granted, demonstrating the successful exploitation of the SQL injection vulnerability.