| Title | Online Eyewear Shop Website has SQL injection |
|---|
| Description | BUG_Author: Murasaki
URL: /oews/admin/?page=orders/view_order&id=*
Link：https://www.sourcecodester.com/php/16089/online-eyewear-shop-website-using-php-and-mysql-free-download.html
Parameter "id" (GET), exists SQL injection vulnerability
SQL injection is found in the administrator background order interface, and the results are obtained by using the data package sent by the administrator authority. |
|---|
| Source | ⚠️ https://github.com/1MurasaKi/Eyewear_Shop_SQLi/blob/main/README.md |
|---|
| User | Murasaki (UID 41555) |
|---|
| Submission | 02/23/2023 03:32 (4 years ago) |
|---|
| Moderation | 02/24/2023 08:34 (1 day later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 221635 [SourceCodester Online Eyewear Shop 1.0 view_order id cross site scripting] |
|---|
| Points | 0 |
|---|