| Title | SourceCodester Online Pizza Ordering System 1.0 /view_prod.php/ ID parameter SQL Injection |
|---|
| Description | A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This issue affects how the back ends leads with the SQL Query sent in GET PARAMETER of the /view_prod.php?id parameter. When abused, the manipulation of the argument ID leads to SQL Injection.
The attack may be initiated remotely. Furthermore, there is an exploit available. Exploits available. |
|---|
| Source | ⚠️ https://cwe.mitre.org/data/definitions/89.html |
|---|
| User | Qnsx (UID 41280) |
|---|
| Submission | 02/18/2023 00:53 (3 years ago) |
|---|
| Moderation | 02/18/2023 09:42 (9 hours later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 221476 [SourceCodester Online Pizza Ordering System 1.0 GET Parameter view_prod.php ID sql injection] |
|---|
| Points | 20 |
|---|