CVE-2021-41648 PoC — PuneethReddyHc Online Shopping System Advanced SQL注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41648.yaml

Associated Vulnerability

Title:PuneethReddyHc Online Shopping System Advanced SQL注入漏洞 (CVE-2021-41648)
Description:PuneethReddyHc Online Shopping System Advanced是印度Puneeth Reddy HC个人开发者的一个开源在线购物系统。 PuneethReddyHc Online Shopping System Advanced 中存在SQL注入漏洞，该漏洞源于 /action.php prId 参数。

Description

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping through the /action.php prId parameter. Using a post request does not sanitize the user input.

File Snapshot


 id: CVE-2021-41648

info:
  name: PuneethReddyHC action.php SQL Injection
  author: daffainfo
  seve

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!