Vulnerabilities > Online PET Shop WE APP Project

DATE CVE VULNERABILITY TITLE RISK
2023-02-26 CVE-2023-1042 Unspecified vulnerability in Online PET Shop WE APP Project Online PET Shop WE APP 1.0
A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic.
network
low complexity
online-pet-shop-we-app-project
6.1
2022-10-27 CVE-2022-39977 Unrestricted Upload of File with Dangerous Type vulnerability in Online PET Shop WE APP Project Online PET Shop WE APP 1.0
Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the User module.
network
low complexity
online-pet-shop-we-app-project CWE-434
7.2
2022-10-27 CVE-2022-39978 Unrestricted Upload of File with Dangerous Type vulnerability in Online PET Shop WE APP Project Online PET Shop WE APP 1.0
Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the Product List module.
network
low complexity
online-pet-shop-we-app-project CWE-434
7.2
2022-10-12 CVE-2022-41407 SQL Injection vulnerability in Online PET Shop WE APP Project Online PET Shop WE APP 1.0
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.
network
low complexity
online-pet-shop-we-app-project CWE-89
7.2
2022-10-12 CVE-2022-41408 SQL Injection vulnerability in Online PET Shop WE APP Project Online PET Shop WE APP 1.0
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.
network
low complexity
online-pet-shop-we-app-project CWE-89
critical
9.8
2022-10-07 CVE-2022-41377 SQL Injection vulnerability in Online PET Shop WE APP Project Online PET Shop WE APP 1.0
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=maintenance/manage_category.
network
low complexity
online-pet-shop-we-app-project CWE-89
7.2
2022-10-07 CVE-2022-41378 SQL Injection vulnerability in Online PET Shop WE APP Project Online PET Shop WE APP 1.0
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=inventory/manage_inventory.
network
low complexity
online-pet-shop-we-app-project CWE-89
7.2
2021-07-30 CVE-2021-35458 SQL Injection vulnerability in Online PET Shop WE APP Project Online PET Shop WE APP 1.0
Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s parameter.
network
low complexity
online-pet-shop-we-app-project CWE-89
critical
9.8