
Proof-of-concept exploit for SQL injection vulnerability in SourceCodester Human Resource Management System 1.0, enabling unauthenticated admin login via crafted password parameter.
SQL injection
SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters.
/hrm/index.php
The attacker can use payload 'or'1'='1 login with administrator account without credentials.
Login with anonymous

Source code contain vulnerability
