Online Shopping System Advanced vulnerabilities
4 known vulnerabilities in Online Shopping System Advanced from PuneethReddyHC. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
online-shopping-system-advanced: Improper Neutralization of Special Elements used in an SQL Command
Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter. Attackers can exploit the vulnerability by sending crafted SQL que
- 7.7 High severity
Online Shopping System Advanced: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.
- 9.8 Critical severity
online_shopping_system_advanced: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php
- 9.8 Critical severity
Online Shopping System Advanced: Improper Authentication
A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads