CVE-2021-41648

creationtimestamp| type| source ---|---|--- 2021-10-01 18:15:24+00:00| seen| https://t.me/cibsecurity/29810 2021-10-04 23:40:06+00:00| published-proof-of-concept| Telegram/SSxn4ORebYjTTM8NRue0KNcU6S-9T4AxTl2nPJ41jbiNiw 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-41648

CVE-2021-41648 affects the PuneethReddyHC Online Shopping System Advanced. An unauthenticated SQL injection exists in the /action.php prId parameter, with input not sanitized for POST requests, allowing an attacker to craft SQL queries against the underlying MySQL database. Connected sources (nuc...