| Título | The Online Pizza Ordering System has Sql injection vulnerabilities |
|---|
| Descrição | ```
The Sql injection vulnerability exists in the online pizza ordering system, which is located in the id parameter of the view_prod.php file. The basic introduction of this vulnerability is that SQL injection means that the web application does not judge or filter the validity of user input data strictly.An attacker can add additional SQL statements to the end of the predefined query statements in the web application to achieve illegal operations without the administrator's knowledge, so as to cheat the database server to execute unauthorized arbitrary queries and further obtain the corresponding data information.
Source Download:https://www.sourcecodester.com/download-code?nid=16166&title=Online+Pizza+Ordering+System+in+PHP+Free+Source+Code |
|---|
| Fonte | ⚠️ https://github.com/Songs-YZS/CveList/blob/main/The%20Online%20Pizza%20Ordering%20System%20has%20Sql%20injection%20vulnerabilities.pdf |
|---|
| Utilizador | YaoSeng (UID 42728) |
|---|
| Submissão | 14/03/2023 08h50 (há 4 anos) |
|---|
| Moderação | 14/03/2023 15h22 (7 hours later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 221476 [SourceCodester Online Pizza Ordering System 1.0 GET Parameter view_prod.php ID Injeção SQL] |
|---|
| Pontos | 0 |
|---|