2021-10-03 10:46:22 +00:00
id : CVE-2021-41649
2021-10-02 15:22:04 +00:00
info :
name : PuneethReddyHC online-shopping-system-advanced SQL Injection homeaction.php
author : daffainfo
2021-10-08 13:40:21 +00:00
severity : critical
2021-10-02 15:22:04 +00:00
description : An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter. Using a post request does not sanitize the user input.
reference : https://github.com/MobiusBinary/CVE-2021-41649
2021-10-04 14:02:07 +00:00
tags : cve,cve2021,sqli
2021-10-08 13:40:21 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score : 9.80
cve-id : CVE-2021-41649
cwe-id : CWE-89
2021-10-02 15:22:04 +00:00
requests :
- method : POST
path :
- "{{BaseURL}}/homeaction.php"
2021-10-04 14:02:07 +00:00
body : "cat_id=4'&get_seleted_Category=1"
2021-10-02 15:22:04 +00:00
matchers-condition : and
matchers :
- type : word
words :
2021-10-04 14:02:07 +00:00
- "text/html"
2021-10-02 15:22:04 +00:00
part : header
- type : word
words :
- "Warning: mysqli_num_rows() expects parameter 1 to be"
2021-10-04 14:02:07 +00:00
- "xdebug-error xe-warning"
2021-10-02 15:22:04 +00:00
part : body
condition : and
- type : status
status :
- 200
