26 matches found
CVE-2024-40498
CVE-2024-40498 Affected Application online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Description The file register.php handles user registration. At line 117, the POST parameters "$address1" and $address2" are unsanitized, unlike the e-mail,...
CVE-2024-58316: Improper Neutralization of Special Elements used in an SQL Command
Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the paymentsuccess.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter. Attackers can exploit the vulnerability by sending crafted SQL queries to retrieve sensitive database...
Online Shopping System Advanced SQL注入漏洞
Online Shopping System Advanced is an online store website by Puneeth Reddy H C Individual Developer. A SQL injection vulnerability exists in Online Shopping System Advanced version 1.0, which stems from a SQL injection in the paymentsuccess.php script that could result in the retrieval of...
CVE-2025-52021: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in the editproduct.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The productid GET parameter is unsafely passed to a SQL query without proper validation or parameterization...
CVE-2025-51969: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. This flaw is present in the productid GET parameter, which is not properly validated before being included in a SQL statement...
CVE-2025-51971: Improper Neutralization of Special Elements used in an SQL Command
A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the fname parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to injec...
CVE-2025-51968: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions...
CVE-2025-51972: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter...
CVE-2025-51970: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter...
Online Shopping System Advanced 跨站脚本漏洞
Online Shopping System Advanced is an online store website by Puneeth Reddy H C Individual Developer. Online Shopping System Advanced suffers from a cross-site scripting vulnerability that stems from susceptibility to Reflective Cross-Site Scripting XSS attacks, in which an attacker uses a crafte...
CVE-2024-3579: Improper Neutralization of Input During Web Page Generation
Open-source project Online Shopping System Advanced is vulnerable to Reflected Cross-Site Scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser...
PT-2024-26740 · Unknown · Online-Shopping-System-Advanced
Name of the Vulnerable Software and Affected Versions: Online Shopping System Advanced affected versions not specified Description: The issue allows for Reflected Cross-Site Scripting XSS, where an attacker could trick a user into using a crafted URL. This would cause a script to run in the user'...
Online Shopping System Advanced - Sql Injection Vulnerability
Exploit Title: Online Shopping System Advanced Exploit Author: Furkan Gedik Vendor Homepage: https://github.com/PuneethReddyHC/online-shopping-system-advanced Software Link: https://github.com/PuneethReddyHC/online-shopping-system-advanced Version: 1.0 Tested on: Kali Linux 2020.3 Description...
Authentication flaw
A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...
CVE-2023-3337: Improper Authentication
A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...
CVE-2023-3311
A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...
CVE-2023-3311 PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting
A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...
CVE-2023-3311: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...
CVE-2022-42109: Improper Neutralization of Special Elements used in an SQL Command
Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php...
