| タイトル | itsourcecode Online Medicine Delivery System v1.0 SQL Injection |
|---|
| 説明 | 1. Description
The product detail page interface /index.php?q=single-item&id= of Online Medicine Delivery System contains an SQL injection vulnerability. The interface receives the user-submitted id parameter and directly concatenates it into a multi-table join SQL query without any filtering, escaping, or type validation. Since the query results are rendered directly to the page via loadResultList(), an attacker can use UNION injection to echo arbitrary data onto the page, achieving data extraction.
This vulnerability can be exploited without any prior authentication and supports 4 injection types (Boolean-based blind, Error-based, Time-based blind, UNION query injection), representing a very broad attack surface.
2.Impact
(1) Full Database Data Disclosure: Through UNION injection, arbitrary data from any database and any table can be directly echoed onto the page, including user password hashes, customer personal information, order data, etc.
(2) No Authentication Required: This interface is a frontend product detail page, accessible and exploitable without any login
(3) Multiple Injection Methods: Supports 4 injection types; even if UNION injection is somehow blocked, data can still be extracted via error-based injection or blind injection
3.Remediation
(1) Use Parameterized Queries
(2) Input Type Validation: The id parameter should be an integer |
|---|
| ソース | ⚠️ https://github.com/boyslikesports/202607_vul_dir/blob/main/C-03-SQLi-Single-Item-ID_en.md |
|---|
| ユーザー | Weining Xiao (UID 88216) |
|---|
| 送信 | 2026年07月16日 14:16 (1 月 ago) |
|---|
| モデレーション | 2026年08月30日 09:44 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 397113 [itsourcecode Online Medicine Delivery System 1.0 Product Detail Page /index.php?q=single-item loadResultList 識別子 SQLインジェクション] |
|---|
| ポイント | 20 |
|---|