Skip to main content

Puneethreddyhc

7 CVEs vendor

Monthly

CVE-2025-51972 Aug 28, 14:15 MEDIUM POC This Month

A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shopping System Advanced Puneethreddyhc
NVD GitHub
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-51971 Aug 28, 14:15 MEDIUM POC This Month

A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS SQLi Online Shopping System Advanced Puneethreddyhc
NVD GitHub
CVSS 3.1
5.4
EPSS
0.0%
CVE-2025-51969 Aug 28, 14:15 MEDIUM POC This Week

A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shopping System Advanced Puneethreddyhc
NVD GitHub
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-51968 Aug 28, 14:15 MEDIUM POC This Week

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shopping System Advanced Puneethreddyhc
NVD GitHub
CVSS 3.1
6.5
EPSS
0.0%
CVE-2024-28322 Apr 26, 22:15 CRITICAL POC Act Now

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the event_id parameter in a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Event Management Puneethreddyhc
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2024-3433 Apr 07, 23:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Event Management Puneethreddyhc
NVD VulDB
CVSS 3.1
5.4
EPSS
0.5%
CVE-2024-3432 Apr 07, 23:15 HIGH POC This Week

A vulnerability was found in PuneethReddyHC Event Management 1.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Event Management Puneethreddyhc
NVD VulDB
CVSS 3.1
8.8
EPSS
0.6%
EPSS 0% CVSS 6.5
MEDIUM POC This Month

A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shopping System Advanced +1
NVD GitHub
EPSS 0% CVSS 5.4
MEDIUM POC This Month

A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS SQLi +2
NVD GitHub
EPSS 0% CVSS 6.5
MEDIUM POC This Week

A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shopping System Advanced +1
NVD GitHub
EPSS 0% CVSS 6.5
MEDIUM POC This Week

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shopping System Advanced +1
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the event_id parameter in a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Event Management +1
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM POC This Month

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Event Management +1
NVD VulDB
EPSS 1% CVSS 8.8
HIGH POC This Week

A vulnerability was found in PuneethReddyHC Event Management 1.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Event Management +1
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy