113 matches found
CVE-2023-3311 PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting
A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...
CVE-2021-43109
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...
CVE-2021-43110
An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...
CVE-2021-43109
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...
CVE-2021-43110
An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...
Use after free
An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...
Sql injection
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...
CVE-2021-43110
An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...
CVE-2021-43110
CVE-2021-43110 concerns an Access Control vulnerability in the PuneethReddyHC online-shopping-system, specifically in the add_products function. The initial records indicate an access-control error as the root cause, with CVSS metrics showing a HIGH/CRITICAL impact profile (CVSS v2 base score 7.5...
CVE-2021-43109
Summary: CVE-2021-43109 tracks an SQL injection vulnerability in the PuneethReddyHC online-shopping-system. The issue arises in the product.php script via the p parameter, allowing an attacker to inject arbitrary SQL statements. Multiple connected sources (NVD, RH, CNVD, CVE list and others) corr...
CVE-2021-43109
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...
CVE-2021-43109
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...
PT-2022-11788
Name of the Vulnerable Software and Affected Versions PuneethReddyHC online-shopping-system affected versions not specified Description The issue is related to an SQL Injection vulnerability. It affects the PuneethReddyHC online-shopping-system as of 11/01/2021. The vulnerability is exploited via...
CVE-2021-43109: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...
PuneethReddyHc Online Shopping System Advanced SQL注入漏洞
PuneethReddyHC is an online shopping system. SQL injection vulnerability exists in PuneethReddyHC, which can be exploited by attackers to execute arbitrary SQL statements with the p parameter in product.php...
PT-2022-11789
Name of the Vulnerable Software and Affected Versions PuneethReddyHC online-shopping-system affected versions not specified Description An Access Control issue exists in the add products component of the online-shopping-system. The estimated number of potentially affected devices worldwide is not...
PuneethReddyHc Online Shopping System Advanced 访问控制错误漏洞
PuneethReddyHc Online Shopping System Advanced is an open source online shopping system by the individual developers of Puneeth Reddy HC in India. An access control error vulnerability exists in the PuneethReddyHC online-shopping-system, which stems from an access control vulnerability in...
CVE-2021-43110: Undefined Security Weakness
An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in addproducts...