707 matches found
CVE-2022-41377
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /petshop/admin/?page=maintenance/managecategory...
CVE-2022-41377
CVE-2022-41377 affects Online Pet Shop We App v1.0. The vulnerability is a SQL injection in the id parameter of the endpoint /pet_shop/admin/?page=maintenance/manage_category. Per CVSS v3.1, it has AV:N, AC:L, PR:H, UI:N, S:U, C:H, I:H, A:H (base score 7.2, HIGH). Exploitation requires high privi...
Online Pet Shop We App Master.php?f=delete_order SQL Injection Vulnerability
Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pet Shop We App version 1.0, which originates from a lack of validation of externally entered SQL statements in the...
Online Pet Shop We App Master.php?f=delete_sub_category SQL Injection Vulnerability
Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pet Shop We App version 1.0, which originates from a lack of validation of externally entered SQL statements in the...
CVE-2022-40934
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
CVE-2022-40935
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
CVE-2022-40934
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
CVE-2022-40935
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
CVE-2022-40933
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
CVE-2022-40933
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
Sql injection
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deleteorder,id...
Sql injection
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
Sql injection
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
CVE-2022-40935
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
CVE-2022-40935
CVE-2022-40935 affects Online Pet Shop We App v1.0. The vulnerability is a SQL Injection in /pet_shop/classes/Master.php?f=delete_category,id, with CVSSv3.1 base score 7.2 (HIGH). Exploitation PoC is indicated in the linked metadata; no patch/remediation details are provided in the supplied docum...
CVE-2022-40935
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /petshop/classes/Master.php?f=deletecategory,id...
CVE-2022-40934
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
CVE-2022-40934
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...
CVE-2022-40934
CVE-2022-40934 concerns Online Pet Shop We App v1.0 , with a reported SQL injection in the endpoint /pet_shop/classes/Master.php?f=delete_sub_category,id. The root cause is a lack of input validation/external SQL statement handling in the page parameter handling, enabling attackers to craft input...