9 matches found
CVE-2021-41649
CVE-2021-41649 CVE-2021-41649 SQL Injection in online-shopping-system The online-shopping-system is vulnerable to un-authenticated error/boolean-based blind & error based SQL Injection attacks. The catid parameter on the /homeaction.php page does not sanitize the user input, an attacker can extra...
PuneethReddyHC Online Shopping System homeaction.php SQL Injection
An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...
CVE-2026-19921 code-projects Online Shopping System homeaction.php sql injection
A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...
CVE-2026-19921 code-projects Online Shopping System homeaction.php sql injection
A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...
EUVD-2026-59811
A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...
CVE-2026-19921: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...
CVE-2021-41649: Improper Neutralization of Special Elements used in an SQL Command
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...
PuneethReddyHc Online Shopping System Advanced SQL注入漏洞
PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. PuneethReddyHc Online Shopping System Advanced suffers from a SQL injection vulnerability that originates in the /homeaction.php catid parameter...
