Lucene search
PRIOn knowledge basePRION:CVE-2021-41648HistoryOct 01, 2021 - 2:15 p.m.
Sql injection
2021-10-0114:15:00
PRIOn knowledge base
www.prio-n.com
6
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input.
References
packetstormsecurity.com/files/165036/PuneethReddyHC-Online-Shopping-System-Advanced-1.0-SQL-Injection.html
awesomeopensource.com/project/PuneethReddyHC/online-shopping-system
github.com/MobiusBinary/CVE-2021-41648
github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41648
www.nu11secur1ty.com/2021/11/cve-2021-41648.html
Related
nvd
nvd
CVE-2021-41648
2021-10-01 14:15:08
cve
cve
CVE-2021-41648
2021-10-01 14:15:08
packetstorm
packetstorm
PuneethReddyHC Online Shopping System Advanced 1.0 SQL Injection
2021-11-20 00:00:00
cvelist
cvelist
CVE-2021-41648
2021-10-01 13:53:37
githubexploit
githubexploit
zdt
zdt
nuclei
nuclei
PuneethReddyHC action.php SQL Injection
2021-10-02 15:16:40