Shop / VS-003
SQL Injection Mug
$12.99
In stock — ships when you least expect it
Ceramic mug with classic payload
Use admin / admin123, or any account from the back office.
Lab note: product ids are sequential and unguarded, so
/product/1 through /product/12 all resolve.
Order receipts behave the same way — see /api/orders/1.