| Título | Online Eyewear Shop Website has SQL injection |
|---|
| Descripción | BUG_Author: Murasaki
URL: /oews/admin/?page=orders/view_order&id=*
Link：https://www.sourcecodester.com/php/16089/online-eyewear-shop-website-using-php-and-mysql-free-download.html
Parameter "id" (GET), exists SQL injection vulnerability
SQL injection is found in the administrator background order interface, and the results are obtained by using the data package sent by the administrator authority. |
|---|
| Fuente | ⚠️ https://github.com/1MurasaKi/Eyewear_Shop_SQLi/blob/main/README.md |
|---|
| Usuario | Murasaki (UID 41555) |
|---|
| Sumisión | 2023-02-23 03:32 (hace 4 años) |
|---|
| Moderación | 2023-02-24 08:34 (1 day later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 221635 [SourceCodester Online Eyewear Shop 1.0 view_order id secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 0 |
|---|