| Название | itsourcecode Online Medicine Delivery System v1.0 SQL Injection |
|---|
| Описание | 1. Description
The product detail page interface /index.php?q=single-item&id= of Online Medicine Delivery System contains an SQL injection vulnerability. The interface receives the user-submitted id parameter and directly concatenates it into a multi-table join SQL query without any filtering, escaping, or type validation. Since the query results are rendered directly to the page via loadResultList(), an attacker can use UNION injection to echo arbitrary data onto the page, achieving data extraction.
This vulnerability can be exploited without any prior authentication and supports 4 injection types (Boolean-based blind, Error-based, Time-based blind, UNION query injection), representing a very broad attack surface.
2.Impact
(1) Full Database Data Disclosure: Through UNION injection, arbitrary data from any database and any table can be directly echoed onto the page, including user password hashes, customer personal information, order data, etc.
(2) No Authentication Required: This interface is a frontend product detail page, accessible and exploitable without any login
(3) Multiple Injection Methods: Supports 4 injection types; even if UNION injection is somehow blocked, data can still be extracted via error-based injection or blind injection
3.Remediation
(1) Use Parameterized Queries
(2) Input Type Validation: The id parameter should be an integer |
|---|
| Источник | ⚠️ https://github.com/boyslikesports/202607_vul_dir/blob/main/C-03-SQLi-Single-Item-ID_en.md |
|---|
| Пользователь | Weining Xiao (UID 88216) |
|---|
| Представление | 16.07.2026 14:16 (1 месяц назад) |
|---|
| Модерация | 30.08.2026 09:44 (1 month later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 397113 [itsourcecode Online Medicine Delivery System 1.0 Product Detail Page /index.php?q=single-item loadResultList ИД SQL-инъекция] |
|---|
| Баллы | 20 |
|---|