CWE-89

CVE-2022-41377

February 23, 2023 by godfreyd94

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=maintenance/manage_category.

CVE-2022-41378

February 23, 2023 by godfreyd94

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=inventory/manage_inventory.

CVE-2022-41390

February 23, 2023 by godfreyd94

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php.

CVE-2022-41391

February 23, 2023 by godfreyd94

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php.

CVE-2022-41403

February 23, 2023 by godfreyd94

OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/so_newletter_custom_popup/newsletter.

CVE-2022-41407

February 23, 2023 by godfreyd94

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.