Vulnerabilities > Online Shopping System Advanced Project > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-06-20 CVE-2023-3337 Unspecified vulnerability in Online Shopping System Advanced Project Online Shopping System Advanced 1.0
A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0.
network
low complexity
online-shopping-system-advanced-project
critical
9.8
2022-11-29 CVE-2022-42109 SQL Injection vulnerability in Online-Shopping-System-Advanced Project Online-Shopping-System-Advanced 1.0
Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php.
network
low complexity
online-shopping-system-advanced-project CWE-89
critical
9.8
2021-10-01 CVE-2021-41649 SQL Injection vulnerability in Online-Shopping-System-Advanced Project Online-Shopping-System-Advanced
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter.
network
low complexity
online-shopping-system-advanced-project CWE-89
critical
9.8