CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

CVE-2021-43110

An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...

Use after free

An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...

Sql injection

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

CVE-2021-43110

CVE-2021-43110 concerns an Access Control vulnerability in the PuneethReddyHC online-shopping-system, specifically in the add_products function. The initial records indicate an access-control error as the root cause, with CVSS metrics showing a HIGH/CRITICAL impact profile (CVSS v2 base score 7.5...

CVE-2021-43110

An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...

CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

CVE-2021-43109

Summary: CVE-2021-43109 tracks an SQL injection vulnerability in the PuneethReddyHC online-shopping-system. The issue arises in the product.php script via the p parameter, allowing an attacker to inject arbitrary SQL statements. Multiple connected sources (NVD, RH, CNVD, CVE list and others) corr...

PuneethReddyHc Online Shopping System Advanced 访问控制错误漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system by the individual developers of Puneeth Reddy HC in India. An access control error vulnerability exists in the PuneethReddyHC online-shopping-system, which stems from an access control vulnerability in...

CVE-2021-43110: Undefined Security Weakness

An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...

PuneethReddyHc Online Shopping System Advanced SQL注入漏洞

PuneethReddyHC is an online shopping system. SQL injection vulnerability exists in PuneethReddyHC, which can be exploited by attackers to execute arbitrary SQL statements with the p parameter in product.php...

CVE-2021-43109: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

CVE-2021-41648

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

CVE-2021-41649

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

CVE-2021-41649

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

Sql injection

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

Sql injection

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

CVE-2021-41648

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

CVE-2021-41648

CVE-2021-41648 affects the PuneethReddyHC Online Shopping System Advanced. An unauthenticated SQL injection exists in the /action.php prId parameter, with input not sanitized for POST requests, allowing an attacker to craft SQL queries against the underlying MySQL database. Connected sources (nuc...