Vulnerabilities

TI-2023-00987 CVE-2023-1042 · GHSA-w7m3-8344-6w5h

SourceCodester Online Pet Shop We App update_status.php cross site scripting

MEDIUM 60

A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00557 Published 2023-02-26 No fix listed CWE-79

TI-2022-18931 CVE-2022-39978 · GHSA-66vp-w6x5-r54g

Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload…

HIGH 67

Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the Product List module.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0139 Published 2022-10-27 No fix listed CWE-434

TI-2022-18930 CVE-2022-39977 · GHSA-9c4c-j76h-qwm7

Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload…

HIGH 67

Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the User module.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0139 Published 2022-10-27 No fix listed CWE-434

TI-2022-19871 CVE-2022-41408 · GHSA-r8pw-j526-28xx

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 44

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0076 Published 2022-10-11 No fix listed CWE-89

TI-2022-19870 CVE-2022-41407 · GHSA-rmj8-48c9-7m4c

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via…

HIGH 67

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2022-10-11 No fix listed CWE-89

TI-2022-19847 CVE-2022-41378 · GHSA-cqg3-m2m3-52fr

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via…

LOW 33

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=inventory/manage_inventory.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2022-10-07 No fix listed CWE-89

TI-2022-19846 CVE-2022-41377 · GHSA-rjr3-pfhr-h3pv

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via…

LOW 33

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=maintenance/manage_category.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2022-10-07 No fix listed CWE-89

TI-2021-14208 CVE-2021-35458 · GHSA-hc6c-q7hv-c9r8

Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka…

MEDIUM 47

Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02467 Published 2021-07-27 No fix listed CWE-89

Vulnerabilities

Filters