Bypass Authentication

Re-registration of an existing user

  1. There is an existing user with the name admin

  2. Register a new user " admin" (space in the starting)

  3. Login with " admin"

  4. That user will have the same right as normal admin. That new user will also be able to see all the content presented under the user admin.

SQL injection

SQL Injection
PreviousLogin Forms AttacksNextLogin Brute Force

Last updated