PuneethReddyHC vulnerabilities
We track 7 vulnerabilities in PuneethReddyHC products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on December 23, 2025.
Latest PuneethReddyHC vulnerabilities
- 9.8 Critical severity
Event Management: Improper Neutralization of Special Elements used in an SQL Command
Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sens
- 7.5 High severity
online-shopping-system-advanced: Improper Neutralization of Special Elements used in an SQL Command
Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter. Attackers can exploit the vulnerability by sending crafted SQL que
- 7.7 High severity
Online Shopping System Advanced: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.
- 9.8 Critical severity
online_shopping_system_advanced: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php
- 9.8 Critical severity
event_management: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the event_id parameter in a crafted POST request.
- 8.8 High severity
Event Management: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument event_id/full_name/email/mobile/college/branch leads
- 9.8 Critical severity
Online Shopping System Advanced: Improper Authentication
A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads