Submit #111525: Online Computer and Laptop Store V1.0 exist Delete category list with SQL injectioninfo

TitleOnline Computer and Laptop Store V1.0 exist Delete category list with SQL injection
DescriptionThis project is entitled Online Computer and Laptop Store . This web application was developed to provide an online platform for a certain computer store or business possible customers for exploring and ordering the products.Version number: v1.0 Source code online address :https://www.sourcecodester.com/php/16397/online-computer-and-laptop-store-using-php-and-mysql-source-code-free-download.html When the administrator deleted the list category in the background, the data entered by the user was not verified or filtered. Directly concatenated into SQL statements for execution. There is a risk of SQL injection.
Source⚠️ https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Delete%20category%20list%20with%20SQL%20injection.pdf
User
 haicheng.zhang (UID 38987)
Submission04/08/2023 04:49 (3 years ago)
Moderation04/08/2023 08:30 (4 hours later)
StatusAccepted
VulDB entry225338 [SourceCodester Online Computer and Laptop Store 1.0 brand.php delete_brand ID sql injection]
Points20

Do you know our Splunk app?

Download it now for free!