5 matches found
CVE-2022-30393: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=product/manageproduct&id=...
CVE-2022-30398: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=orders/vieworder&id=...
CVE-2022-30399: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=maintenance/managecategory&id=...
CVE-2022-30402: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=maintenance/managesubcategory&id=...
CVE-2022-30400: Improper Neutralization of Special Elements used in an SQL Command
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user&id=...