CVE-2023-3311

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-3311

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

Cross site scripting

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-3311 PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-3311 PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-3311

CVE-2023-3311 affects the PuneethReddyHC online-shopping-system-advanced 1.0. The vulnerability is in the addsuppliers.php file, where manipulating the First name parameter leads to cross-site scripting. It can be triggered remotely and public exploits exist. Connected sources also recommend rest...

CVE-2021-43110

An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...

CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

Sql injection

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

Use after free

An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...

CVE-2021-43110

An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...

CVE-2021-43110

CVE-2021-43110 concerns an Access Control vulnerability in the PuneethReddyHC online-shopping-system, specifically in the add_products function. The initial records indicate an access-control error as the root cause, with CVSS metrics showing a HIGH/CRITICAL impact profile (CVSS v2 base score 7.5...

CVE-2021-43109

Summary: CVE-2021-43109 tracks an SQL injection vulnerability in the PuneethReddyHC online-shopping-system. The issue arises in the product.php script via the p parameter, allowing an attacker to inject arbitrary SQL statements. Multiple connected sources (NVD, RH, CNVD, CVE list and others) corr...

CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

PuneethReddyHc Online Shopping System Advanced 访问控制错误漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system by the individual developers of Puneeth Reddy HC in India. An access control error vulnerability exists in the PuneethReddyHC online-shopping-system, which stems from an access control vulnerability in...

PuneethReddyHc Online Shopping System Advanced SQL注入漏洞

PuneethReddyHC is an online shopping system. SQL injection vulnerability exists in PuneethReddyHC, which can be exploited by attackers to execute arbitrary SQL statements with the p parameter in product.php...

CVE-2021-41648

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

CVE-2021-41649

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

CVE-2021-41648

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...