online-shopping-system-advanced_project CVEs

Beta · best-effort

4 CVEs tagged to vendor online-shopping-system-advanced_project — 2 Critical, 1 High, 0 Medium, 1 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2023-3311

Published Jun 18, 2023

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. T…

CVSS 2.4 · Low

Vendor/product tagsBeta · best-effort

CVE-2022-42109

Published Nov 29, 2022

Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-41649

Published Oct 1, 2021

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter. Using a post request does not sanitize the…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-41648

Published Oct 1, 2021

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1