Hello guys, same problem. I’m stuck in the same point: I have got credential and login page. No luck with injection in login page. I have found other 2 pages:
one give me a 302, I tried some parameters with no luck.
the other is a contact page where parameters seems not to be injectable. In the source file I have found a comment referring a line 19 of PHP file but I cannot correlate these info… Please give me a hint, I’m blocked since 1 week…