## https://sploitus.com/exploit?id=PACKETSTORM:172032
# Exploit Title: Online Book Store 1.0 - (process.php) SQL injection
# Google Dork: 4/26/2023
# Exploit Author: Or4nG.M4n
# Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-book-store-project-in-php/
# Software Link: https://github.com/projectworlds32/online-book-store-project-in-php/archive/master.zip
# Version: 1.0
* STEPS *
1- go to any book and add it to cart
2- after that u will redirected to /cart.php
3- click on Go To Checkout /checkout.php
4- inject your'e injecton code in any of this post parameters
parameters : name address city zip_code country
foreach($_SESSION['cart'] as $isbn => $qty){
$bookprice = getbookprice($isbn);
$query = "INSERT INTO order_items VALUES <====== 1
('$orderid', '$isbn', '$bookprice', '$qty')"; <====== 2
$result = mysqli_query($conn, $query); <====== 3
if(!$result){
echo "Insert value false!" . mysqli_error($conn2); <====== 4
exit;
}
}