CVE-2021-41649

CVE-2021-41649 CVE-2021-41649 online-shopping-system における SQL インジェクション online-shopping-system は、認証されていないエラーベース/ブールベースのブラインド SQL インジェクションおよびエラーベースの SQL インジェクション攻撃に対して脆弱です。 /homeaction.php ページの catid パラメータはユーザー入力をサニタイズしていないため、攻撃者は基盤となる MySQL データベースから機密データを抽出できます。 アプリケーションへのリンク online-shopping-syste...

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

CVE-2026-19921 code-projects Online Shopping System homeaction.php sql injection

A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

EUVD-2026-59811

A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

PuneethReddyHc Online Shopping System Advanced SQL注入漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. PuneethReddyHc Online Shopping System Advanced suffers from a SQL injection vulnerability that originates in the /homeaction.php catid parameter...

Exploit for SQL Injection in Online-Shopping-System-Advanced_Project Online-Shopping-System-Advanced

CVE-2021-41649 CVE-2021-41649 SQL Injection in online-shoppin...