9 matches found
Malicious code in @zalastax/nolb-prid (npm)
The package @zalastax/nolb-prid was found to contain malicious code. --- Credit: OpenSSF source...
PuneethReddyHC action.php SQL Injection Detection
An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping through the /action.php prId parameter. Using a post request does not sanitize the user input. !/usr/bin/env python3 -- coding: utf-8 -- """An unauthenticated SQL injection vulnerability exists in PuneethReddy...
Malicious code in @zalastax/nolb-prid (npm)
The package @zalastax/nolb-prid was found to contain malicious code...
MAL-2025-13308 Malicious code in @zalastax/nolb-prid (npm)
The package @zalastax/nolb-prid was found to contain malicious code...
CVE-2021-41648
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...
CVE-2021-41648
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...
CVE-2021-41648: Improper Neutralization of Special Elements used in an SQL Command
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...
PuneethReddyHc Online Shopping System: Advanced SQL Injection Vulnerability
PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. A SQL injection vulnerability exists in PuneethReddyHc Online Shopping System Advanced, which originates in the /action.php prId parameter...
PT-2021-23367
Name of the Vulnerable Software and Affected Versions PuneethReddyHC online-shopping-system-advanced affected versions not specified Description An un-authenticated SQL Injection issue exists in the software through the "/action.php" API endpoint, specifically via the prId parameter. This occurs...