| शीर्षक | itsourcecode Online Medicine Delivery System v1.0 SQL Injection |
|---|
| विवरण | The rider backend order management controller /rider/orders/controller.php of Online Medicine Delivery System contains an SQL injection vulnerability in the order status update functionality. The functionality receives the $_GET['id'] parameter and directly concatenates it into 4 different SQL statements within the same request:
(1) Order::pupdate() — UPDATE order status
(2) Summary::update() — UPDATE summary status
(3) SELECT query — Query customer information for SMS notification
(4) SELECT query — Query order product information for SMS notification
The id parameter is numeric-type and can be injected without closing quotes. This interface requires an Admin login session, but an attacker can combine it with the Employee authentication SQL injection bypass vulnerability of this system to obtain an Admin session without a password, effectively making this vulnerability exploitable by unauthenticated attackers. |
|---|
| स्रोत | ⚠️ https://github.com/boyslikesports/202607_vul_dir/blob/main/C-12-SQLi-Rider-Order-MultiPoint_en.md |
|---|
| उपयोगकर्ता | Weining Xiao (UID 88216) |
|---|
| सबमिशन | 16/07/2026 03:39 PM (2 महीनों पहले) |
|---|
| संयम | 03/09/2026 01:54 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 398400 [itsourcecode Online Medicine Delivery System 1.0 Order Status Update controller.php?action=edit&actions=confirm Order::pupdate पहचान SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|