以下是关于漏洞的关键信息： Summary - Affected Product Name: Library System - Affected Version: V1.0 - Vulnerability Type: SQL Injection (SQLi) - Affected File: /mail.php - Affected Parameter: id (GET) - Authentication Required: None (No login or authorization required to exploit) Description and Impact - Root Cause: - The vulnerability resides in the file , where the application processes user-supplied input from the (ID) parameter. - The program directly concatenates this parameter value into the SQL query string without sufficient cleaning, validation, or sanitization. - Impact: - Unauthorized Database Access: Stealing sensitive data such as user information or book records. - Data Tampering/Destruction: Modifying, deleting, or adding records in the database. - System Control: In severe cases, gaining system-level control, posing a serious threat to system security and business continuity. Vulnerability Details and PoC - PoC Payload Examples: Suggested Repair Measures - Use Prepared Statements and Parameter Binding - Rewrite all database queries in (and all other files) to use Prepared Statements (e.g., using or PDO with parameter binding). - Strict Input Validation and Filtering - For parameters like which should be numeric, use PHP functions like or for strict checking. - Minimize Database User Permissions - Adhere to the Principle of Least Privilege. The database account used by the web application for daily operations should only possess the minimum necessary permissions. - Regular Security Audits - Establish a routine process for security code reviews and auditing to proactively identify and fix potential vulnerabilities before they are exploited.