Submit #685619: code-projects Simple Cafe Ordering System published October 30, 2025 SQL Injection

Vulnerability Overview:
The application concatenates $_POST/$_GET values directly into SQL strings and uses the deprecated mysql_* API to execute queries. This pattern appears across multiple endpoints (login, registration, order submission, search) and results in classic SQL injection vulnerabilities.
Root Cause:
User-supplied input is inserted into SQL statements without server-side validation or parameterization. The codebase relies on legacy mysql_* functions that do not support prepared statements, so untrusted values are interpreted as SQL.
Exploitability & Impact:
An attacker can exploit these injection points to bypass authentication (login), read arbitrary database rows/columns, and manipulate business logic (e.g., create or modify orders). If the database account has high privileges, data modification or deletion is also possible.
Proof-of-Concept (brief):
POST username=admin' OR '1'='1' -- to the login endpoint (with any password). If the application authenticates the request (redirects, sets session), SQL injection is confirmed. Alternatively, inject boolean tests (e.g., product_id=1' AND 1=2 --) and observe response differences.
Mitigation Summary:
Replace mysql_* usage with PDO or mysqli and use prepared statements with bound parameters. Validate and whitelist inputs (types, lengths, formats), centralize DB access into a safe data layer, and use least-privilege database credentials. Add logging and monitoring to detect suspicious query patterns.
Short tagline: Direct string concatenation of client input into SQL + legacy mysql_* usage = easily exploitable SQL injection — fix by parameterizing queries and validating inputs.

• Quelle: ⚠️ https://github.com/shenxianyuguitian/cafeorder_vuln_SQL/blob/main/README.md
• Benutzer: xuanyuesanshi (UID 88126)
• Einreichung: 30.10.2025 09:23 (vor 7 Monaten)
• Moderieren: 14.11.2025 17:24 (15 days later)
• Status: Akzeptiert
• VulDB Eintrag: 332499 [code-projects Simple Cafe Ordering System 1.0 /login.php Benutzername SQL Injection]
• Punkte: 20