Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2026/08/14 11:15 a.m.•5 views

Malicious code in @zalastax/nolb-prid (npm)

The package @zalastax/nolb-prid was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•10 views

PuneethReddyHC action.php SQL Injection Detection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping through the /action.php prId parameter. Using a post request does not sanitize the user input. !/usr/bin/env python3 -- coding: utf-8 -- """An unauthenticated SQL injection vulnerability exists in PuneethReddy...

7.5CVSS6.4AI score0.10251EPSS
SaveExploits5References6
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•4 views

Malicious code in @zalastax/nolb-prid (npm)

The package @zalastax/nolb-prid was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-13308 Malicious code in @zalastax/nolb-prid (npm)

The package @zalastax/nolb-prid was found to contain malicious code...

7.2AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/10/01 2:15 p.m.•23 views

CVE-2021-41648

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

7.5CVSS7.2AI score0.10251EPSS
SaveExploits5References7
Mend
Mend
•added 2021/10/01 1:53 p.m.•6 views

CVE-2021-41648

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

8.7CVSS0.10251EPSS
SaveExploits5References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•8 views

CVE-2021-41648: Improper Neutralization of Special Elements used in an SQL Command

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input...

7.5CVSS7.2AI score0.10251EPSS
SaveExploits5References2
CNNVD
CNNVD
•added 2021/10/01 12:00 a.m.•22 views

PuneethReddyHc Online Shopping System: Advanced SQL Injection Vulnerability

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. A SQL injection vulnerability exists in PuneethReddyHc Online Shopping System Advanced, which originates in the /action.php prId parameter...

7.5CVSS7.2AI score0.10251EPSS
SaveExploits5References7
Positive Technologies
Positive Technologies
•added 2021/10/01 12:00 a.m.•7 views

PT-2021-23367

Name of the Vulnerable Software and Affected Versions PuneethReddyHC online-shopping-system-advanced affected versions not specified Description An un-authenticated SQL Injection issue exists in the software through the "/action.php" API endpoint, specifically via the prId parameter. This occurs...

7.5CVSS0.10251EPSS
SaveExploits5References11
Rows per page
Query Builder