| عنوان | SourceCodester E-Commerce Website 1.0 SQL Injection |
|---|
| الوصف |
SQL Injection vulnerability was discovered in Sourcecodester's Online Computer and Laptop Store. (user registration)
Official Website: https://www.sourcecodester.com/php/16397/online-computer-and-laptop-store-using-php-and-mysql-source-code-free-download.html
Version: 1.0
Related Code file: /php-ocls/classes/Master.php
The email variable is directly inserted into the SQL query without any escaping or parameterization. An attacker could inject malicious SQL code by manipulating the email field. in (line number 390 of Master.php)
The email is directly inserted into the SQL query without escaping or validation:
Line 379: $check = $this->conn->query("SELECT * FROM `clients` where `email` = '{$email}' ".(!empty($id) ? " and id != {$id} " : "")." ")->num_rows;
If a malicious user injects SQL code into the email or id parameters, they can manipulate the query.
Injection parameter: email
Step to Reproduce:
1. Install and Setup the Online Computer Store.
2. click of Login or follow this path (http://192.168.192.128/php-ocls/login) Click on **Login** now click on **Create Account**
4. Fill the form and intercept the **POST** request in burp and copy the request
5. Store this request in a .txt file eg: register_req.txt
6. Run sqlmap
`sqlmap -r register_req.txt -p email`
Observe the SQL injection
|
|---|
| المصدر | ⚠️ https://github.com/gurudattch/CVEs/blob/main/SourceCodester-Online-Computer-Laptop-Shop-SQLi-poc.md |
|---|
| المستخدم | guru (UID 74056) |
|---|
| ارسال | 30/08/2024 05:53 PM (2 سنوات منذ) |
|---|
| الاعتدال | 30/08/2024 06:05 PM (12 minutes later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 241254 [SourceCodester Online Computer and Laptop Store 1.0 Master.php register email حقن SQL] |
|---|
| النقاط | 0 |
|---|