EUVD-2020-10035

Malware in sbrugna...

EUVD-2021-20880

Malware in sbrugna...

EUVD-2016-1408

Malware in sbrugna...

EUVD-2019-6491

Malware in sbrugna...

EUVD-2021-11302

Malware in sbrugna...

EUVD-2020-2918

Malware in sbrugna...

EUVD-2021-11588

Malware in sbrugna...

EUVD-2017-15626

Malware in sbrugna...

EUVD-2018-10714

Malware in sbrugna...

EUVD-2020-2922

Malware in sbrugna...

EUVD-2017-3040

Malware in sbrugna...

EUVD-2021-11217

Malware in sbrugna...

EUVD-2021-11308

Malware in sbrugna...

EUVD-2018-1926

Malware in sbrugna...

EUVD-2020-2923

Malware in sbrugna...

PT-2025-41137

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Online Shopping System Advanced version 1.0 Description A SQL Injection issue exists in the edit product.php file. The product id GET parameter is passed to a SQL query without sufficient validation or parameterization. This cou...

CVE-2025-52021: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in the editproduct.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The productid GET parameter is unsafely passed to a SQL query without proper validation or parameterization...

CVE-2025-56243: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

CVE-2025-11288 CRMEB GET Parameter product sql injection

A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing a manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...

CVE-2025-11288: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing a manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...