CVE-2021-41649

creationtimestamp| type| source ---|---|--- 2021-10-01 18:15:22+00:00| seen| https://t.me/cibsecurity/29809 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41649.yaml 2024-11-22 00:00:00+00:00| seen| The Shadowserver...

CVE-2021-41649

CVE-2021-41649 is an unauthenticated SQL injection in the PuneethReddyHC Online Shopping System (Advanced) via the /homeaction.php cat_id parameter. The Nuclei template details a POST-based input that is not sanitized, enabling arbitrary SQL execution and potential data leakage/manipulation. Affe...