PT-2022-27748 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the "/hss/admin/categories/view category.php?id=" API endpoint, specifically through the id variable. Recommendations: For Helm...

Helmet Store Showroom Site 跨站请求伪造漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0 that stems from a lack of CSRF protection, which allows an...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...

CVE-2022-46119

CVE-2022-46119 affects Helmet Store Showroom Site v1.0. The vulnerability is an SQL Injection in the page parameter /hss/?page=categories&c= (input likely concatenated into a query). CVSSv3.1 base score 7.2 (HIGH) with network attack vector, no user interaction needed, and high impact on confiden...

CVE-2022-46124

Affected software: Helmet Store Showroom Site v1.0. The vulnerability is a SQL Injection in the admin endpoint at /hss/admin/?page=user/manage_user&id= (or similar). Root cause: untrusted input in the id parameter allows manipulation of database queries, with high impact on confidentiality, integ...

CVE-2022-46125

Vulnerability summary: CVE-2022-46125 affects Helmet Store Showroom Site v1.0, with a SQL Injection flaw exposed via the admin endpoint /hss/admin/?page=client/manage_client&id=. The connected sources consistently describe an injection in the id parameter, implying a backend query concatenation r...

CVE-2022-46126

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/managebrand.php?id=...

CVE-2022-46119

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=...

CVE-2022-46118

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=productperbrand&bid=...

PT-2022-27742 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/hss/?page=view product&id=" API endpoint, specifically through the id variable. There is no information provid...

CVE-2022-46071

There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from its /hss/classes/Master.php?f=deleteproduct...

CVE-2022-46124

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manageuser&id=...

PT-2022-27750 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns SQL Injection via the "/hss/admin/?page=user/manage user&id=" API endpoint. This allows for potential manipulation of database queries. No information is provided about th...

CVE-2022-46123

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/managecategory.php?id=...

CVE-2022-46118

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=productperbrand&bid=...

CVE-2022-46123

CVE-2022-46123 affects the Helmet Store Showroom Site v1.0. The issue is a SQL Injection in the admin endpoint at /hss/admin/categories/manage_category.php?id=, allowing unauthorized database queries. The CVSS v3.1 data shows a base score of 7.2 (HIGH), with Network attack vector, Low attack comp...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from a SQL injection on the login page and can be...

CVE-2022-46120

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/viewproduct&id=...

CVE-2022-46120

CVE-2022-46120 affects Helmet Store Showroom Site v1.0, with a reported SQL Injection in the admin endpoint “/hss/admin/?page=products/view_product&id=”. The root cause is unsanitized user input in the id parameter, enabling an attacker to manipulate SQL queries. The CVSS v3.1 base score is 7.2 (...