PuneethReddyHC Online Shopping System vulnerabilities

3 known CVE vulnerabilities in PuneethReddyHC Online Shopping System, translated and rated.

CVE-2025-51972Medium
A SQL Injection vulnerability exists in login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of the 'keyword' POST parameter.
CVE-2025-51969Medium
A SQL Injection vulnerability exists in product.php of PuneethReddyHC Online Shopping System Advanced 1.0. The 'product_id' GET parameter is not properly validated before being included in a SQL statement.
CVE-2025-51968Medium
A SQL Injection vulnerability exists in action.php of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize the 'proId' POST parameter, allowing attackers to inject arbitrary SQL expressions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS