Submit #111546: Online Computer and Laptop Store SQL injection exists at the newly added sub category listinfo

TitleOnline Computer and Laptop Store SQL injection exists at the newly added sub category list
DescriptionThis project is entitled Online Computer and Laptop Store . This web application was developed to provide an online platform for a certain computer store or business possible customers for exploring and ordering the products.Version number: v1.0 Source code online address:https://www.sourcecodester.com/php/16397/online-computer-and-laptop-store-using-php-and-mysql-source-code-free-download.html In the backend of the system, there is a management function for system subcategories, where you can add subcategories for system classification. However, the input data was not filtered during the addition process. Users execute whatever content they input. SQL injection exists.
Source⚠️ https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20added%20subcategory%20list.pdf
User yanfei.chen (UID 39837)
Submission04/08/2023 06:09 (3 years ago)
Moderation04/08/2023 08:30 (2 hours later)
StatusAccepted
VulDB entry225344 [SourceCodester Online Computer and Laptop Store 1.0 Subcategory Master.php?f=save_sub_category sql injection]
Points20

Want to know what is going to be exploited?

We predict KEV entries!