Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-35469 — Proof-of-concept for SQL injection vulnerability in SourceCodester Human Resource Management System 1.0, enabling unauthenticated admin login via password parameter manipulation. | Kitploit
Tools/GitHubGitHub/dovankha/cve-2024-35469
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubdovankha/cve-2024-35469

CVE-2024-35469

Proof-of-concept for SQL injection vulnerability in SourceCodester Human Resource Management System 1.0, enabling unauthenticated admin login via password parameter manipulation.

View Repository
112 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-35469

Submitter: Kha Do

Human Resource Management System 1.0

Vulnerability

SQL injection

Description

SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters.

Affected component

/hrm/user/

Impact

The attacker can use payload 'or'1'='1 login with administrator account without credentials.

POC

Login with anonymous SQL_bypass_login

Source code contain vulnerability Source_code_SQLi

Video

https://github.com/dovankha/SQLi_Login_User/assets/63991630/63129397-26e9-47fa-a2bc-0748fcc03c6b

Download Tool