Puneethreddyhc vulnerabilities
Published CVEs affecting Puneethreddyhc products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-65354
Critical · 9.8
CWE-89 Dec 23, 2025
SQL Injection in Puneethreddyhc Event Management
Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sensitive data disclosure and backend compromise.
CVE-2024-58316
High · 7.5
CWE-89 Dec 12, 2025
Online Shopping System Advanced 1.0 SQL Injection via Payment Success Parameter
Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter. Attackers can exploit the vulnerability by sending crafted SQL queries to retrieve sensitive database information by manipulating the user ID parameter.