Book List - SQL Injection Testing Area

This section demonstrates SQL injection vulnerabilities in book detail queries.

How to Test:

  1. Click on "View Details" for any book
  2. Modify the ID parameter in the URL with SQL injection payloads
  3. Observe how malicious SQL can be executed

Example Test:

Instead of /Books/Details/1, try:

  • /Books/Details/1' OR '1'='1
  • /Books/Details/1' UNION SELECT 1,2,3,4,5 --
Title Author Published Date ISBN Price Action
Dune Frank Herbert 08/01/1965 978-0441013593 $9.99 View Details (Test SQLi)
Neuromancer William Gibson 07/01/1984 978-0441569595 $8.99 View Details (Test SQLi)
The Left Hand of Darkness Ursula K. Le Guin 03/01/1969 978-0441478125 $7.99 View Details (Test SQLi)
Snow Crash Neal Stephenson 06/01/1992 978-0553380958 $8.49 View Details (Test SQLi)
Foundation Isaac Asimov 05/01/1951 978-0553293357 $9.95 View Details (Test SQLi)
The War of the Worlds H.G. Wells 04/01/1898 978-1503260467 $6.99 View Details (Test SQLi)
Hyperion Dan Simmons 05/26/1989 978-0553283686 $10.99 View Details (Test SQLi)
The Expanse: Leviathan Wakes James S.A. Corey 06/02/2011 978-0316129084 $11.49 View Details (Test SQLi)
Altered Carbon Richard K. Morgan 03/01/2002 978-0345457684 $9.99 View Details (Test SQLi)
Do Androids Dream of Electric Sheep? Philip K. Dick 02/01/1968 978-0345404473 $7.49 View Details (Test SQLi)