Online Pet Shop We App Master.php?f=delete_sub_category SQL Injection Vulnerability

Online Pet Shop We App is an online pet store web application from Carlo Montero’s personal developer. version 1.0 of Online Pet Shop We App is vulnerable to SQL injection, which originates from /pet_shop/classes/Master.php?f=delete_sub_category page id parameter missing validation for external input SQL statement. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.