PatchTheCVEonline pet shop we app vulnerabilities and fixes
Recent CVEs affecting online pet shop we app, with upgrade or downgrade steps. 7 tracked.
Also searched as: onlinepetshopweapp.
online pet shop we app has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-02-26. Highest priority: CVE-2022-41408 (score 53/100).
- CVE-2023-1042 LOW 3.5 DOWNGRADE A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic
- CVE-2022-41408 CRITICAL 9.8 DOWNGRADE Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /a
- CVE-2022-41407 HIGH 7.2 DOWNGRADE Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /a
- CVE-2022-41378 HIGH 7.2 DOWNGRADE Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /p
- CVE-2022-41377 HIGH 7.2 DOWNGRADE Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /p
- CVE-2022-39978 HIGH 7.2 DOWNGRADE Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing f
- CVE-2022-39977 HIGH 7.2 DOWNGRADE Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing f
FAQ
How do I fix online pet shop we app vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is online pet shop we app being exploited right now?
None of the tracked online pet shop we app CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which online pet shop we app CVE should I patch first?
CVE-2022-41408 currently ranks highest (53/100): Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /a.