CVE-2021-41649 PoC — PuneethReddyHc Online Shopping System Advanced SQL注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41649.yaml

Associated Vulnerability

Title:PuneethReddyHc Online Shopping System Advanced SQL注入漏洞 (CVE-2021-41649)
Description:PuneethReddyHc Online Shopping System Advanced是印度Puneeth Reddy HC个人开发者的一个开源在线购物系统。 PuneethReddyHc Online Shopping System Advanced 存在SQL注入漏洞，该漏洞源于/homeaction.php cat_id 参数。

Description

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php cat_id parameter. Using a post request does not sanitize the user input.

File Snapshot


 id: CVE-2021-41649

info:
  name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!