Online Shopping System Advanced Project

online-shopping-system-advanced_project

5 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Online Shopping System Advanced

online-shopping-system-advanced

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-3337 1Online Shopping System Advanced Project 1Online Shopping System Advanced Jun 17, 2026 Jun 20, 2023 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Ad...Show more A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The attack can be launched remotely. The identifier VDB-232009 was assigned to this vulnerability.Show less
CVE-2023-3311 1Online Shopping System Advanced Project 1Online Shopping System Advanced Jun 17, 2026 Jun 18, 2023 N/A· v4 5.4 MEDIUM· v3 3.3 LOW· v2 A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First nam...Show more A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231807.Show less
CVE-2022-42109 1Online Shopping System Advanced Project 1Online Shopping System Advanced Jun 17, 2026 Nov 29, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php.
CVE-2021-41649 1Online Shopping System Advanced Project 1Online Shopping System Advanced Jun 17, 2026 Oct 1, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter. Using a post request does not sanitize the user input.
CVE-2021-41648 1Online Shopping System Advanced Project 1Online Shopping System Advanced Jun 17, 2026 Oct 1, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input.