Vulnerabilities

TI-2023-03098 CVE-2023-3311 · GHSA-pjrh-pp7p-c7xg

PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting

MEDIUM 58

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00588 Published 2023-06-18 No fix listed CWE-79

TI-2022-20391 CVE-2022-42109 · GHSA-c9xc-qcg9-c8hr

HIGH 82

Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01263 Published 2022-11-29 No fix listed CWE-89

TI-2021-18353 CVE-2021-41648 · GHSA-x962-x72m-hxpq

MEDIUM 45

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10251 Published 2021-10-01 No fix listed CWE-89

TI-2021-18354 CVE-2021-41649 · GHSA-2wch-qhpr-mqp5

HIGH 74

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.52051 Published 2021-10-01 No fix listed CWE-89