| 标题 | The Online Pizza Ordering System has Sql injection vulnerabilities |
|---|
| 描述 | ```
The Sql injection vulnerability exists in the online pizza ordering system, which is located in the id parameter of the view_prod.php file. The basic introduction of this vulnerability is that SQL injection means that the web application does not judge or filter the validity of user input data strictly.An attacker can add additional SQL statements to the end of the predefined query statements in the web application to achieve illegal operations without the administrator's knowledge, so as to cheat the database server to execute unauthorized arbitrary queries and further obtain the corresponding data information.
Source Download:https://www.sourcecodester.com/download-code?nid=16166&title=Online+Pizza+Ordering+System+in+PHP+Free+Source+Code |
|---|
| 来源 | ⚠️ https://github.com/Songs-YZS/CveList/blob/main/The%20Online%20Pizza%20Ordering%20System%20has%20Sql%20injection%20vulnerabilities.pdf |
|---|
| 用户 | YaoSeng (UID 42728) |
|---|
| 提交 | 2023-03-14 08時50分 (4 年前) |
|---|
| 管理 | 2023-03-14 15時22分 (7 hours later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 221476 [SourceCodester Online Pizza Ordering System 1.0 GET Parameter view_prod.php ID SQL注入] |
|---|
| 积分 | 0 |
|---|