| عنوان | The Online Pizza Ordering System has Sql injection vulnerabilities |
|---|
| الوصف | ```
The Sql injection vulnerability exists in the online pizza ordering system, which is located in the id parameter of the view_prod.php file. The basic introduction of this vulnerability is that SQL injection means that the web application does not judge or filter the validity of user input data strictly.An attacker can add additional SQL statements to the end of the predefined query statements in the web application to achieve illegal operations without the administrator's knowledge, so as to cheat the database server to execute unauthorized arbitrary queries and further obtain the corresponding data information.
Source Download:https://www.sourcecodester.com/download-code?nid=16166&title=Online+Pizza+Ordering+System+in+PHP+Free+Source+Code |
|---|
| المصدر | ⚠️ https://github.com/Songs-YZS/CveList/blob/main/The%20Online%20Pizza%20Ordering%20System%20has%20Sql%20injection%20vulnerabilities.pdf |
|---|
| المستخدم | YaoSeng (UID 42728) |
|---|
| ارسال | 14/03/2023 08:50 AM (4 سنوات منذ) |
|---|
| الاعتدال | 14/03/2023 03:22 PM (7 hours later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 221476 [SourceCodester Online Pizza Ordering System 1.0 GET Parameter view_prod.php ID حقن SQL] |
|---|
| النقاط | 0 |
|---|