PuneethReddyHC

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

PuneethReddyHC records in CISA KEV

No PuneethReddyHC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Shopping System Advanced 6 records HIGH Event Management 4 records HIGH Event Management System 1 record LOW

Records

6 records in Online Shopping System Advanced · all components

TI-2024-38413 CVE-2024-58316 · GHSA-65w8-f62m-jvph

Online Shopping System Advanced 1.0 SQL Injection via Payment Success Parameter

HIGH 77

Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00565 Published 2025-12-12 No fix listed CWE-89

TI-2025-32442 CVE-2025-51969 · GHSA-586q-m34p-37c2

A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online…

HIGH 70

A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00244 Published 2025-08-28 No fix listed CWE-89

TI-2025-32441 CVE-2025-51968 · GHSA-xqj4-vchj-vm63

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online…

HIGH 70

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00244 Published 2025-08-28 No fix listed CWE-89

TI-2025-32445 CVE-2025-51972 · GHSA-9pq7-9952-8r4q

A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping…

HIGH 68

A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00244 Published 2025-08-28 No fix listed CWE-89

TI-2025-32444 CVE-2025-51971 · GHSA-mh2g-mp9r-879h

A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of…

MEDIUM 58

A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00268 Published 2025-08-28 No fix listed CWE-89

TI-2025-32443 CVE-2025-51970 · GHSA-j4qh-gv6q-2rj5

A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online…

LOW 35

A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00284 Published 2025-07-29 No fix listed CWE-89

Open these records in search →

Critical	3
High	3
Medium	7
Low	0
No CVSS	0