CVE-2021-41648

CVE-2021-41648 affects the PuneethReddyHC Online Shopping System Advanced. An unauthenticated SQL injection exists in the /action.php prId parameter, with input not sanitized for POST requests, allowing an attacker to craft SQL queries against the underlying MySQL database. Connected sources (nuc...