Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the…

CVE-2018-25183 affects Shipping System CMS 1.0, containing an SQL injection vulnerability in the admin login endpoint. Unauthenticated attackers can bypass authentication by injecting malicious SQL code through the username parameter. The vulnerability allows exploitation using boolean-based blind SQL injection techniques via POST requests. Attackers can authenticate without valid credentials by submitting crafted SQL payloads. This represents a critical authentication bypass vulnerability in the content management system.