| 标题 | SourceCodester Online Pizza Ordering System 1.0 /view_prod.php/ ID parameter SQL Injection |
|---|
| 描述 | A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This issue affects how the back ends leads with the SQL Query sent in GET PARAMETER of the /view_prod.php?id parameter. When abused, the manipulation of the argument ID leads to SQL Injection.
The attack may be initiated remotely. Furthermore, there is an exploit available. Exploits available. |
|---|
| 来源 | ⚠️ https://cwe.mitre.org/data/definitions/89.html |
|---|
| 用户 | Qnsx (UID 41280) |
|---|
| 提交 | 2023-02-18 00時53分 (4 年前) |
|---|
| 管理 | 2023-02-18 09時42分 (9 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 221476 [SourceCodester Online Pizza Ordering System 1.0 GET Parameter view_prod.php ID SQL注入] |
|---|
| 积分 | 20 |
|---|