| शीर्षक | itsourcecode Online Medicine Delivery System v1.0 SQL Injection |
|---|
| विवरण | 1.Description
The product search interface /index.php?q=product of Online Medicine Delivery System contains an SQL injection vulnerability. The interface receives the user-submitted search parameter and directly concatenates it into a LIKE fuzzy query SQL statement without any filtering or escaping. Since the query results are rendered directly to the product listing page via loadResultList(), an attacker can use UNION injection to echo arbitrary data onto the page.
The particularity of this vulnerability is that the injection point is within the LIKE '%{$_POST['search']}%' clause. The attacker needs to first close the %' parenthesis and single quote before appending the injection statement, but essentially it is no different from a regular string-type injection. This vulnerability can be exploited without any prior authentication.
2.Impact
(1) Full Database Data Disclosure: Through UNION injection, arbitrary data from any database and any table can be directly echoed onto the product listing page, including user password hashes, customer personal information, order data, etc.
(2) No Authentication Required: This interface is a frontend product search feature, accessible and exploitable without any login
(3) Multiple Injection Methods: Supports 4 injection types (Boolean-based blind, Error-based, Time-based blind, UNION query injection), representing a very broad attack surface
3.Remediation
(1) Use Parameterized Queries
(2) Input Validation: Perform character whitelist validation on search keywords, limiting the allowed character range
|
|---|
| स्रोत | ⚠️ https://github.com/boyslikesports/202607_vul_dir/blob/main/C-04-SQLi-Product-Search-LIKE_en.md |
|---|
| उपयोगकर्ता | Weining Xiao (UID 88216) |
|---|
| सबमिशन | 16/07/2026 02:19 PM (2 महीनों पहले) |
|---|
| संयम | 30/08/2026 09:44 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 397114 [itsourcecode Online Medicine Delivery System 1.0 Product Search Interface /index.php?q=product loadResultList खोज SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|