Vulnerabilities

TI-2022-19491 CVE-2022-40935 · GHSA-4x65-mvw7-frvc

Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f=delete_category,id.

HIGH 67

Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f=delete_category,id.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00998 Published 2022-09-22 No fix listed CWE-89

TI-2022-19490 CVE-2022-40934 · GHSA-jwmc-fm79-rcrq

HIGH 67

Online Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_sub_category,id

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00998 Published 2022-09-22 No fix listed CWE-89

TI-2022-19489 CVE-2022-40933 · GHSA-2c9f-m8c9-p33j

HIGH 67

Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_order,id.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01078 Published 2022-09-22 No fix listed CWE-89

TI-2021-14207 CVE-2021-35456 · GHSA-gfwr-35rp-qv77

MEDIUM 46

Online Pet Shop We App 1.0 is vulnerable to remote SQL injection and shell upload

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02119 Published 2021-06-28 No fix listed CWE-89