Description

Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f=delete_category,id.

Related CPE's

a

online_pet_shop_web_application_project

online_pet_shop_web_application

1.0

Vulnerable

References

https://github.com/lime-10010/Bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/SQLi-2.md

ExploitThird Party Advisory

https://github.com/lime-10010/Bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/SQLi-2.md

ExploitThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-89

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary
CWE-89

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-09-22T15:15:12.117Z

3 years ago

Last modified

2025-05-27T14:15:28.773Z

10 months ago