SQL Injection Vulnerability in PuneethReddyHC Online Shopping System
CVE-2021-43109

7.5HIGH

Key Information:

Vendor

Puneethreddyhc Online-shopping-system Project

Status
Puneethreddyhc Online-shopping-system
Vendor
CVE Published:
29 March 2022

What is CVE-2021-43109?

An SQL Injection vulnerability is present in the PuneethReddyHC online shopping system, which can be exploited through the 'p' parameter in the product.php file. This flaw could potentially allow attackers to manipulate the database, leading to unauthorized data access and breaches. Users of the system are advised to review their security practices and apply necessary patches to mitigate the risk associated with this vulnerability.

References

https://github.com/PuneethReddyHC/online-shopping-system/...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.