PT-2022-20088

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=pay order endpoint, specifically through the f parameter set to pay order...

PT-2022-20086

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=delete order API endpoint. Recommendations For Merchandise Online Store version...

PT-2022-20092

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /vloggers merch/classes/Master.php?f=delete cart endpoint, specifically through the f parameter set to delete cart. Recommendations...

PT-2022-20090

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/classes/Master.php?f=delete sub category endpoint. Recommendations For Merchandise Online Store...

PT-2022-20087

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /vloggers merch/classes/Master.php API endpoint, specifically when the f parameter is set to delete featured. Recommendations For...