[Lei]

███ ███ ██  [REPORT: MyeHalal SQLi Exposure · 2025-06-05]
Origin: Anonymous
Subject: SQL Injection Vulnerability – myehalal.halal.gov.my

Target:
https://myehalal.halal.gov.my

Vulnerability Type:
Unauthenticated SQL Injection → Full Panel Access

Vector:
Login field vulnerable to classic SQLi:
Payload used:
  ' OR '1'='1' -- 

Result:
• Bypass of authentication gate
• Admin-level access to portal dashboard
• Retrieval of user-submitted data without credentials
• Evidence of unsanitized backend queries

Impact:
• Access to thousands of records (halal certification applications)
• Downloadable document archive (PDFs of IDs, business forms, certs)
• No CAPTCHA, WAF, or rate limiting
• Unencrypted data at rest and in transit (expired TLS)
• Database tables: `users`, `applications`, `documents`, `audit_log`

Additional Notes:
• No alert triggered. Session remained active for >15 minutes.
• Logs suggest this vulnerability may have been live for years.
• Exploitation required no tools beyond a browser and Burp.

Proof of Concept:
Login POST with payload:
```sql
username=' OR '1'='1' -- 
password=anything

---

dm me for the admin panel url

[faorre14]

hi, i'm interested, could u please send me the admin panel url? :)

[Lei]

hi, i'm interested, could u please send me the admin panel url? :)

https://myehalal.halal.gov.my/myihab/v1/admin/index.php

enjoy! add me a reputation if youre okay with it thanks

[Idolag]

thanks

[SamuelPhync]

This CBD fuel and https://www.nothingbuthemp.net/pages/are...olls-legal stands in because of its cagey flatten weave and balanced taste. The spunk motif is fawning and practical, and the dropper works strictly without dripping. It feels like a well-crafted artefact made with prominence to detail, from labeling to packaging.

[memhbGsa]

vulnerability/exploit is patched but cool stuff tho  thanks anywayss

[SamuelPhync]

The https://www.nothingbuthemp.net/collectio...-mushrooms arrived spectacularly protected, with assured wrapping and clear instructions included. Caboodle was organized neatly advantageous the thwack, which made the unboxing happening filling and polished.

[SamuelPhync]

A CBD balm and https://www.nothingbuthemp.net/pages/are...oles-legal from this brand has a winning, monotonous consistency that spreads easily. The container is closely-knit and travel-friendly, and the lid closes securely. The smell is gleam and botanical, which makes it attractive to commemorate last nearby.

[odinnishere]

thanks