| 제목 | ONLINE_FOOD_ORDER_SYSTEM - Error-Based SQL Injection in delete_food_items1.php v1 SQL Injection |
|---|
| 설명 | ## ONLINE_FOOD_ORDER_SYSTEM - Error-Based SQL Injection in delete_food_items1.php
### Vulnerability Description
An error-based SQL injection vulnerability exists in the `delete_food_items1.php` file of the ONLINE_FOOD_ORDER_SYSTEM. The `checkbox` POST parameter is directly concatenated into an SQL UPDATE statement without any sanitization, and database errors are output via `mysqli_error()`, allowing attackers to extract sensitive data through error-based injection.
### Impact
An attacker can leverage this vulnerability to extract database information (database name, table names, column names, user credentials, etc.) and potentially modify or delete arbitrary data in the database.
### Code Analysis
**delete_food_items1.php:**
```php
$cheks = implode("','", $_POST['checkbox']); // No sanitization
$sql = "UPDATE FOOD SET `options` = 'DISABLE' WHERE F_ID in ('$cheks')";
$result = mysqli_query($conn,$sql) or die(mysqli_error($conn)); // Error output
```
### Payload
```
checkbox[]=80'and/**/extractvalue(1,concat(char(126),md5(1779411101)))and'
```
### Source Download
https://code-projects.org/online-food-order-system-in-php-with-source-code/ |
|---|
| 원천 | ⚠️ https://github.com/zzzxc643/CVE1/blob/main/project1/vul7.md |
|---|
| 사용자 | SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (UID 38936) |
|---|
| 제출 | 2026. 06. 26. PM 04:17 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 08. 15. AM 07:08 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 390167 [code-projects Online Food Order System 1.0 delete_food_items1.php checkbox SQL 주입] |
|---|
| 포인트들 | 20 |
|---|