Code-Projects Hostel Management System Improper Authentication Vulnerability

A logical flaw allowing improper authentication has been identified in Code-Projects Hostel Management System version 1.0. The vulnerability resides in the Login component, specifically within the hostel_manage.exe file. This issue arises because the pass() function does not properly check return values, enabling attackers to access the backend by incorrectly entering usernames and passwords three times. The vulnerability can be exploited locally, without any login or authorization requirements.

Impact

Exploitation of this vulnerability can lead to unauthorized access to the backend system.

Reproduction

To reproduce this vulnerability, enter incorrect usernames and passwords three times. The lack of proper return value checking in the pass() function will allow access to the backend, bypassing authentication requirements.