Puneethreddyhc maintains a small portfolio of web-based business applications—including an online shopping system and event management platforms—that expose common application-layer input-handling vulnerabilities. The vendor's disclosures skew toward serious outcomes, clustering around SQL injection and cross-site scripting weaknesses that reflect inadequate input validation and sanitization in web application development. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Puneethreddyhc over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-65354CRITICAL Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can a | Dec 23, 2025 | 9.8 | 32 | NO | NO |
CVE-2024-28322CRITICAL SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the event_id | Apr 26, 2024 | 9.8 | 26 | NO | NO |
CVE-2025-51970HIGH A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the key | Jul 29, 2025 | 7.7 | 25 | NO | NO |
CVE-2024-58316HIGH Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'c | Dec 12, 2025 | 7.5 | 24 | NO | NO |
CVE-2024-3432HIGH A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The m | Apr 7, 2024 | 8.8 | 24 | NO | NO |
CVE-2025-51972MEDIUM A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST | Aug 28, 2025 | 6.5 | 22 | NO | NO |
CVE-2025-51969MEDIUM A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. This flaw is present in the product_id GET parameter, which is n | Aug 28, 2025 | 6.5 | 22 | NO | NO |
CVE-2025-51968MEDIUM A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in | Aug 28, 2025 | 6.5 | 22 | NO | NO |
CVE-2025-56243MEDIUM A Cross-Site Scripting (XSS) vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the event_id GET parameter is improperly handled. | Oct 7, 2025 | 6.1 | 21 | NO | NO |
CVE-2025-51971MEDIUM A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the f_name parameter is | Aug 28, 2025 | 5.4 | 19 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Puneethreddyhc.
Media articles that mention a CVE ID that affects a product developed by Puneethreddyhc — matched by CVE ID, not by vendor name.