https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:35:06.239604+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-58316 CVE-2024-58316 — Online Shopping System Advanced 1.0 SQL Injection via Payment Success Parameter 2026-10-15T23:35:06.258577+00:00

Affected: PuneethReddyHC online-shopping-system-advanced

Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter. Attackers can exploit the vulnerability by sending crafted SQL queries to retrieve sensitive database information by manipulating the user ID parameter.