| 标题 | Online Eyewear Shop Website has SQL injection |
|---|
| 描述 | BUG_Author: Murasaki
URL: /oews/admin/?page=orders/view_order&id=*
Link：https://www.sourcecodester.com/php/16089/online-eyewear-shop-website-using-php-and-mysql-free-download.html
Parameter "id" (GET), exists SQL injection vulnerability
SQL injection is found in the administrator background order interface, and the results are obtained by using the data package sent by the administrator authority. |
|---|
| 来源 | ⚠️ https://github.com/1MurasaKi/Eyewear_Shop_SQLi/blob/main/README.md |
|---|
| 用户 | Murasaki (UID 41555) |
|---|
| 提交 | 2023-02-23 03時32分 (4 年前) |
|---|
| 管理 | 2023-02-24 08時34分 (1 day later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 221635 [SourceCodester Online Eyewear Shop 1.0 view_order id 跨网站脚本] |
|---|
| 积分 | 0 |
|---|