BUG_Author: YuLin Chen

Vulnerability Type： SQL Injection

Vendor of Product： code-projects

Affected Product Code Base：computer-laboratory-system - 1.0

Project Url：https://code-projects.org/computer-laboratory-system-in-php-with-source-code/

Attack Type：Remote

Description: code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts.

1、Enter the login page：

![1.png](https://github.com/Chen1-Boop/CVE/blob/main/images/CVE-2025-60307/1.png?raw=true)

2、Fill in admin in Username, enter universal password in Password, such as ('OR 1=1 #), and capture:

![2.png](https://github.com/Chen1-Boop/CVE/blob/main/images/CVE-2025-60307/2.png?raw=true)

3、You can see that true_admin is returned:

![3.png](https://github.com/Chen1-Boop/CVE/blob/main/images/CVE-2025-60307/3.png?raw=true)

4、Successfully logged into the system：

![4.png](https://github.com/Chen1-Boop/CVE/blob/main/images/CVE-2025-60307/4.png?raw=true)

5、Sqlmap command：
sqlmap -r D:/login_request.txt -p password --current-db

![5.png](https://github.com/Chen1-Boop/CVE/blob/main/images/CVE-2025-60307/5.png?raw=true)