| 标题 | SourceCodester Online Mobile Management Store 1.0 SQL Injection |
|---|
| 描述 | The code in '/admin/orders/view_order.php' directly uses the $_GET['id'] parameter in the SQL query without proper sanitization or validation. An attacker could manipulate the id parameter in the URL to inject malicious SQL code, potentially leading to unauthorized access or data manipulation. |
|---|
| 来源 | ⚠️ https://github.com/vanitashtml/CVE-Dumps/blob/main/SQL%20Injection%20in%20View%20Order%20-%20Mobile%20Management%20Store.md |
|---|
| 用户 | rjavenido22 (UID 64261) |
|---|
| 提交 | 2024-03-03 05時32分 (3 年前) |
|---|
| 管理 | 2024-03-03 17時01分 (11 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 255585 [SourceCodester Online Mobile Management Store 1.0 view_order.php id SQL注入] |
|---|
| 积分 | 18 |
|---|