GU Glitcher UniversitySTUDENT PORTAL · Fall 2025

Campus Store

Filter by category: apparel stationery electronics services

Glitcher Hoodie

apparel · $38.0

Navy hoodie with gold crest.

Buy

Campus Mug

apparel · $12.0

Ceramic, 350ml.

Buy

Objective  Make the store reveal a hidden, UNRELEASED product the normal filter hides.

💡 Show hint

The category filter is put straight into the SQL. Close the quote and add OR '1'='1, or UNION SELECT the products where released=0.

FlawUser input is concatenated into the SQL string (SQL injection). FixUse parameterised queries / prepared statements.