online pet shop web application vulnerabilities and fixes

Recent CVEs affecting online pet shop web application, with upgrade or downgrade steps. 4 tracked.

Also searched as: onlinepetshopwebapplication.

online pet shop web application has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-22. Highest priority: CVE-2021-35456 (score 60/100).

• CVE-2022-40935 HIGH 7.2 DOWNGRADE Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f=delete_category,
• CVE-2022-40934 HIGH 7.2 DOWNGRADE Online Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_sub_categ
• CVE-2022-40933 HIGH 7.2 DOWNGRADE Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=del
• CVE-2021-35456 CRITICAL 9.8 DOWNGRADE Online Pet Shop We App 1.0 is vulnerable to remote SQL injection and shell upload

FAQ

How do I fix online pet shop web application vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is online pet shop web application being exploited right now?

None of the tracked online pet shop web application CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which online pet shop web application CVE should I patch first?

CVE-2021-35456 currently ranks highest (60/100): Online Pet Shop We App 1.0 is vulnerable to remote SQL injection and shell upload.

RSS feed for online pet shop web application · ← Back to latest CVEs