Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s parameter.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/163282/Online-Pet-Shop-We-App-1.0-SQL-Injection-Shell-Upload.html | Third Party Advisory VDB Entry |
| https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-35458 | Exploit Third Party Advisory |
| https://www.sourcecodester.com/php/14839/online-pet-shop-we-app-using-php-and-paypal-free-source-code.html | Product |
Configurations
Configuration 1 (hide)
|
History
05 Nov 2021, 17:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-35458 - Exploit, Third Party Advisory |
21 Oct 2021, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
04 Aug 2021, 00:43
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| CPE | cpe:2.3:a:online_pet_shop_we_app_project:online_pet_shop_we_app:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
| References | (MISC) https://www.sourcecodester.com/php/14839/online-pet-shop-we-app-using-php-and-paypal-free-source-code.html - Product | |
| References | (MISC) http://packetstormsecurity.com/files/163282/Online-Pet-Shop-We-App-1.0-SQL-Injection-Shell-Upload.html - Third Party Advisory, VDB Entry |
30 Jul 2021, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-07-30 14:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-35458
Mitre link : CVE-2021-35458
CVE.ORG link : CVE-2021-35458
JSON object : View
Products Affected
online_pet_shop_we_app_project
- online_pet_shop_we_app
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')