Vendors / Online Pet Shop We App Project Online Pet Shop We App Project Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 5
Exploited now Online Pet Shop We App Project records in CISA KEV No Online Pet Shop We App Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01019 · Published 2022-10-11 · No fix listed CWE-89
Priority HIGH 67
Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the Product List module.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0139 · Published 2022-10-27 · No fix listed CWE-434
Priority HIGH 67
Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the User module.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0139 · Published 2022-10-27 · No fix listed CWE-434
Priority MEDIUM 60
A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00557 · Published 2023-02-26 · No fix listed CWE-79
Priority MEDIUM 47
Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02467 · Published 2021-07-27 · No fix listed CWE-89
Priority MEDIUM 44
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0076 · Published 2022-10-11 · No fix listed CWE-89
Priority LOW 33
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=inventory/manage_inventory.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00891 · Published 2022-10-07 · No fix listed CWE-89
Priority LOW 33
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=maintenance/manage_category.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00891 · Published 2022-10-07 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
2 5 1 0 0
THREATIST.IORead the docs