CVE-2021-41648 PoC — PuneethReddyHc Online Shopping System Advanced SQL注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41648.yaml

Associated Vulnerability

Title:PuneethReddyHc Online Shopping System Advanced SQL注入漏洞 (CVE-2021-41648)
Description:An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input.

Description

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping through the /action.php prId parameter. Using a post request does not sanitize the user input.

File Snapshot


 id: CVE-2021-41648

info:
  name: PuneethReddyHC action.php SQL Injection
  author: daffainfo
  seve

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →