Vulnerabilidades de Puneethreddyhc
CVEs publicadas que afetam produtos de Puneethreddyhc: 2 registro(s), com severidade, exploração e correções.
CVE-2025-65354
Crítica · 9.8
CWE-89 23/12/2025
SQL Injection em Puneethreddyhc Event Management
Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sensitive data disclosure and backend compromise.
CVE-2024-58316
Alta · 7.5
CWE-89 12/12/2025
Online Shopping System Advanced 1.0 SQL Injection via Payment Success Parameter
Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter. Attackers can exploit the vulnerability by sending crafted SQL queries to retrieve sensitive database information by manipulating the user ID parameter.