{"action":"opened","issue":{"url":"https://api.github.com/repos/mallinalli/VW_appweb/issues/1","labels_url":"https://api.github.com/repos/mallinalli/VW_appweb/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/mallinalli/VW_appweb/issues/1/comments","events_url":"https://api.github.com/repos/mallinalli/VW_appweb/issues/1/events","html_url":"https://github.com/mallinalli/VW_appweb/issues/1","id":57074037,"number":1,"title":"SQL injection vulnerability","user":{"login":"Holyshatots","id":5590912,"avatar_url":"https://avatars.githubusercontent.com/u/5590912?v=3","gravatar_id":"","url":"https://api.github.com/users/Holyshatots","html_url":"https://github.com/Holyshatots","followers_url":"https://api.github.com/users/Holyshatots/followers","following_url":"https://api.github.com/users/Holyshatots/following{/other_user}","gists_url":"https://api.github.com/users/Holyshatots/gists{/gist_id}","starred_url":"https://api.github.com/users/Holyshatots/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Holyshatots/subscriptions","organizations_url":"https://api.github.com/users/Holyshatots/orgs","repos_url":"https://api.github.com/users/Holyshatots/repos","events_url":"https://api.github.com/users/Holyshatots/events{/privacy}","received_events_url":"https://api.github.com/users/Holyshatots/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-02-09T19:01:42Z","updated_at":"2015-02-09T19:01:42Z","closed_at":null,"body":"In `encuesta.php`, `$email` is used without escaping the string at line 15:\r\n` $result = mysql_query(\"SELECT * FROM usuarios WHERE email= '$email'\");`\r\n\r\nThis could be used to perform an sql injection attack. For more information about sql injections look [here.](https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet)"}}