| Titolo | ONLINE_FOOD_ORDER_SYSTEM - Error-Based SQL Injection in delete_food_items1.php v1 SQL Injection |
|---|
| Descrizione | ## ONLINE_FOOD_ORDER_SYSTEM - Error-Based SQL Injection in delete_food_items1.php
### Vulnerability Description
An error-based SQL injection vulnerability exists in the `delete_food_items1.php` file of the ONLINE_FOOD_ORDER_SYSTEM. The `checkbox` POST parameter is directly concatenated into an SQL UPDATE statement without any sanitization, and database errors are output via `mysqli_error()`, allowing attackers to extract sensitive data through error-based injection.
### Impact
An attacker can leverage this vulnerability to extract database information (database name, table names, column names, user credentials, etc.) and potentially modify or delete arbitrary data in the database.
### Code Analysis
**delete_food_items1.php:**
```php
$cheks = implode("','", $_POST['checkbox']); // No sanitization
$sql = "UPDATE FOOD SET `options` = 'DISABLE' WHERE F_ID in ('$cheks')";
$result = mysqli_query($conn,$sql) or die(mysqli_error($conn)); // Error output
```
### Payload
```
checkbox[]=80'and/**/extractvalue(1,concat(char(126),md5(1779411101)))and'
```
### Source Download
https://code-projects.org/online-food-order-system-in-php-with-source-code/ |
|---|
| Fonte | ⚠️ https://github.com/zzzxc643/CVE1/blob/main/project1/vul7.md |
|---|
| Utente | SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (UID 38936) |
|---|
| Sottomissione | 26/06/2026 16:17 (2 mesi fa) |
|---|
| Moderazione | 15/08/2026 07:08 (2 months later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 390167 [code-projects Online Food Order System 1.0 delete_food_items1.php checkbox iniezione SQL] |
|---|
| Punti | 20 |
|---|