Approved changes feed: RSS · Atom

cpe:2.3:a:puneethreddyhc:online-shopping-system-advanced:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPuneethreddyhc (93c1ae95-1ee8-5dd6-97a4-825db4437587)
ProductOnline Shopping System Advanced (d9ff67b1-dc38-5cea-a2de-32b5ba0dedfa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-58316 vulnerable 2026-06-08 06:56:14.424079 Online Shopping System Advanced 1.0 SQL Injection via Payment Success Parameter
HIGH (7.5)
Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter. Attackers can exploit the vulnerability by sending crafted SQL queries to retrieve sensitive database information by manipulating the user ID parameter.
Published: 2025-12-12T20:14:23.741Z
Updated: 2026-04-07T14:08:57.175Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3311 vulnerable 2026-06-08 06:09:39.116517 PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting
LOW (2.4)
A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231807.
Published: 2023-06-18T15:00:04.431Z
Updated: 2024-11-27T16:19:20.053Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.