| Название | SourceCodester Online Pizza Ordering System 1.0 /view_prod.php/ ID parameter SQL Injection |
|---|
| Описание | A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This issue affects how the back ends leads with the SQL Query sent in GET PARAMETER of the /view_prod.php?id parameter. When abused, the manipulation of the argument ID leads to SQL Injection.
The attack may be initiated remotely. Furthermore, there is an exploit available. Exploits available. |
|---|
| Источник | ⚠️ https://cwe.mitre.org/data/definitions/89.html |
|---|
| Пользователь | Qnsx (UID 41280) |
|---|
| Представление | 18.02.2023 00:53 (4 лет назад) |
|---|
| Модерация | 18.02.2023 09:42 (9 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 221476 [SourceCodester Online Pizza Ordering System 1.0 GET Parameter view_prod.php ID SQL-инъекция] |
|---|
| Баллы | 20 |
|---|