Sql injection

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

CVE-2021-41649

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

CVE-2021-41648

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

CVE-2021-41648

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

CVE-2021-41648

CVE-2021-41648 affects the PuneethReddyHC Online Shopping System Advanced. An unauthenticated SQL injection exists in the /action.php prId parameter, with input not sanitized for POST requests, allowing an attacker to craft SQL queries against the underlying MySQL database. Connected sources (nuc...

CVE-2021-41648

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

CVE-2021-41649

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

CVE-2021-41649

CVE-2021-41649 is an unauthenticated SQL injection in the PuneethReddyHC Online Shopping System (Advanced) via the /homeaction.php cat_id parameter. The Nuclei template details a POST-based input that is not sanitized, enabling arbitrary SQL execution and potential data leakage/manipulation. Affe...

PT-2021-23367

Name of the Vulnerable Software and Affected Versions PuneethReddyHC online-shopping-system-advanced affected versions not specified Description An un-authenticated SQL Injection issue exists in the software through the "/action.php" API endpoint, specifically via the prId parameter. This occurs...

CVE-2021-41649: Improper Neutralization of Special Elements used in an SQL Command

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

PuneethReddyHc Online Shopping System Advanced SQL注入漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. A SQL injection vulnerability exists in PuneethReddyHc Online Shopping System Advanced, which originates in the /action.php prId parameter...

CVE-2021-41648: Improper Neutralization of Special Elements used in an SQL Command

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...