| शीर्षक | SourceCodester Online Food Ordering System 1.0 CWE-89 |
|---|
| विवरण | SourceCodester Online Food Ordering System order.php id parameter SQL Injection
A critical SQL injection vulnerability exists in Online Food Ordering System
developed by katojkalemba and distributed via SourceCodester. The vulnerability
is located in /web/order.php at line 19. The id GET parameter is passed
directly into a SQL query without sanitization, escaping, or prepared statements.
An unauthenticated remote attacker can exploit this to extract sensitive data
from the database including admin credentials.
Vulnerable code:
$id = $_GET['id'];
$sql = "select * from tbl_food where id=$id";
Proof of Concept:
http://TARGET/web/order.php?id=0 UNION SELECT 1,username,password,4,5,6,7,8 FROM tbl_admin-- -
Result: Admin username and password hash rendered directly in the
order form food title and hidden price fields of the HTTP response.
Unauthenticated attackers can dump the entire database including admin
credentials, customer personal data (names, emails, phone numbers,
addresses), and all order history.
|
|---|
| उपयोगकर्ता | ameenk (UID 100553) |
|---|
| सबमिशन | 13/08/2026 10:40 AM (1 महीना पहले) |
|---|
| संयम | 14/09/2026 07:42 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 403412 [SourceCodester/katojkalemba Online Food Ordering System 1.0 /web/order.php पहचान SQL इंजेक्शन] |
|---|
| अंक | 17 |
|---|