CVE-2020-29214: SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via…

PriorityP260critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EXPLOIT

EPSS

4.50%

90.3th percentile

SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
alumni_management_system_project	alumni_management_system	—	—

Detection & IOCsextracted from sources · hover to see the quote

url/admin/ajax.php?action=login↗

path/admin/login.php↗

commandusername=admin'+or+'1'%3D'1'%23&password=↗

→Detect SQL injection auth-bypass attempts targeting the Alumni Management System login endpoint by inspecting POST body for the classic OR-based payload pattern against /admin/ajax.php?action=login ↗
→Successful exploitation results in a 200 response containing both 'Welcome back Admin!' and 'Alumni List' in the body, and the absence of '#login-form' — use these strings to confirm post-exploitation access ↗
→Monitor for POST requests to /admin/ajax.php with action=login parameter combined with URL-encoded SQL metacharacters (e.g., %27, %3D, %23) in the username field as an indicator of exploitation attempts ↗

·The SQL injection payload targets the username field specifically; the password field value is irrelevant to exploitation success (any random value suffices) ↗
·The exploit is confirmed against Alumni Management System version 1.0 only; other versions are not referenced in the sources ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.