{"cvss":0.0,"datePublished":"2024-01-22T00:00:00Z","dateUpdated":"2024-01-22T00:00:00Z","description":"An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter. Using a post request does not sanitize the user input.","dueDate":"","id":"CVE-2021-41649","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"online-shopping-system-advanced","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"online-shopping-system-advanced_project online-shopping-system-advanced Improper Neutralization of Special Elements used in an SQL Command","vendor":"online-shopping-system-advanced_project"}