SQL: SELECT id, name, category, price, stock FROM products ORDER BY id LIMIT 4
DRIVER: PDO sqlite3 / PHP 8.5.11
Home - OWASP Shop Lab (PHP)
OWASP Shop Lab (PHP) mode: vuln switch login
Training target. This page is intentionally vulnerable. Keep this deployment private - see README.

LAB hint panel - index

  • A03-12 Reflected XSS via promo
    ?promo=<img src=x onerror=alert(1)>
  • A03-13 DOM XSS via name
    ?name=<svg/onload=alert(1)>
  • A02-09 Internal host leaked in HTML comment
    view-source

Welcome to the lab shop

Promo: Free shipping over $50

Featured

Visitor

...
LAB