PuneethReddyHC Online Shopping System Advanced 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:puneethreddyhc:online_shopping_system_advanced:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Puneethreddyhc (93c1ae95-1ee8-5dd6-97a4-825db4437587) |
|---|---|
| Product | Online Shopping System Advanced (2a3c363b-556c-5659-8411-9e99dabead20) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/puneethreddyhc/online-shopping-system-advanced |
purl2cpe | 2026-06-01 10:15:33.423398 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-51972 |
vulnerable | 2026-06-08 07:31:11.330069 |
Details available
A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.
Published: 2025-08-28T00:00:00.000Z
Updated: 2025-08-28T14:24:11.155Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51971 |
vulnerable | 2026-06-08 07:31:11.329818 |
Details available
A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the f_name parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to inject arbitrary JavaScript code.
Published: 2025-08-28T00:00:00.000Z
Updated: 2025-08-28T14:26:39.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51970 |
vulnerable | 2026-06-08 07:31:11.329348 |
Details available
A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.
Published: 2025-07-29T00:00:00.000Z
Updated: 2025-08-28T13:45:03.363Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51969 |
vulnerable | 2026-06-08 07:31:11.328822 |
Details available
A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. This flaw is present in the product_id GET parameter, which is not properly validated before being included in a SQL statement.
Published: 2025-08-28T00:00:00.000Z
Updated: 2025-08-28T20:01:01.148Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51968 |
vulnerable | 2026-06-08 07:31:11.328336 |
Details available
A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions.
Published: 2025-08-28T00:00:00.000Z
Updated: 2025-08-28T20:00:02.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-58316 |
vulnerable | 2026-06-08 06:56:14.426601 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40498 |
vulnerable | 2026-06-08 06:43:52.306725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3579 |
vulnerable | 2026-06-08 06:43:50.352157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.