203 matches found
Helmet Store Showroom Site SQL注入漏洞
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...
Helmet Store Showroom Site SQL注入漏洞
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...
CVE-2022-46074
Helmet Store Showroom 1.0 is affected by CVE-2022-46074: a CSRF vulnerability due to missing CSRF protection enables an unauthenticated attacker to add an admin account. This is a high-severity issue (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The connected documents provide product/version...
PT-2022-27750 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns SQL Injection via the "/hss/admin/?page=user/manage user&id=" API endpoint. This allows for potential manipulation of database queries. No information is provided about th...
Helmet Store Showroom Site SQL注入漏洞
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from a SQL injection on the login page and can be...
PT-2022-27744
Name of the Vulnerable Software and Affected Versions Helmet Store Showroom Site version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/hss/?page=categories&c=" endpoint. The c variable is vulnerable to SQL injection attacks. Recommendations For Helmet Store...
CVE-2022-46122
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/viewcategory.php?id=...
CVE-2022-46074
Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery CSRF. An unauthenticated user can add an admin account due to missing CSRF protection...
CVE-2022-46123
CVE-2022-46123 affects the Helmet Store Showroom Site v1.0. The issue is a SQL Injection in the admin endpoint at /hss/admin/categories/manage_category.php?id=, allowing unauthorized database queries. The CVSS v3.1 data shows a base score of 7.2 (HIGH), with Network attack vector, Low attack comp...
CVE-2022-46125
Vulnerability summary: CVE-2022-46125 affects Helmet Store Showroom Site v1.0, with a SQL Injection flaw exposed via the admin endpoint /hss/admin/?page=client/manage_client&id=. The connected sources consistently describe an injection in the id parameter, implying a backend query concatenation r...
CVE-2022-46117
CVE-2022-46117 affects Helmet Store Showroom Site v1.0. A SQL Injection flaw exists in the product view endpoint ( /hss/?page=view_product&id= ), with root cause an unsafely handled id parameter. The published CVSS 3.1 vector indicates HIGH impact across confidentiality, integrity, and availabili...
CVE-2022-46121
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manageproduct&id=...
CVE-2022-46117
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=viewproduct&id=...
PT-2022-27752 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns SQL Injection. It can be exploited via the "/hss/admin/brands/manage brand.php" API endpoint, specifically through the id variable. Recommendations: For Helmet Store...
Helmet Store Showroom Site SQL注入漏洞
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...
CVE-2022-46125: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...
CVE-2022-46125
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...
CVE-2022-46072
CVE-2022-46072 affects Helmet Store Showroom v1.0 and is described as an unauthenticated SQL Injection vulnerability. The provided connected documents confirm the issue type (SQL injection) and affected software (Helmet Store Showroom v1.0) but do not supply concrete details on the root cause spe...
CVE-2022-46127
CVE-2022-46127 affects Helmet Store Showroom Site v1.0. The vulnerability is a SQL Injection in the endpoint /hss/classes/Master.php?f=delete_product (Master.php delete_product function), enabling database impact with high severity (CVSS 3.1: HIGH, vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Con...