203 matches found
CVE-2022-46071
There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access...
CVE-2022-46118
Helmet Store Showroom Site v1.0 is affected by an SQL Injection vulnerability in the /hss/?page=product_per_brand&bid= endpoint. The root cause is unsanitized input in the bid parameter, enabling attackers to manipulate queries. The CVE is rated with CVSS v3.1 base score 7.2 (HIGH) with network a...
PT-2022-27746 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/hss/admin/?page=products/view product&id=" endpoint. The id variable is vulnerable to injection attacks...
PT-2022-27743 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the "/hss/?page=product per brand&bid=" API endpoint. The bid variable is vulnerable to SQL Injection attacks. Recommendations:...
Helmet Store Showroom Site SQL注入漏洞
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.1, which stems from an SQL injection vulnerability via...
CVE-2022-46118: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=productperbrand&bid=...
CVE-2022-46117
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=viewproduct&id=...
CVE-2022-46125
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...
CVE-2022-46074: Cross-Site Request Forgery (CSRF)
Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery CSRF. An unauthenticated user can add an admin account due to missing CSRF protection...
CVE-2022-46127: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...
CVE-2022-46122: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/viewcategory.php?id=...
CVE-2022-46120: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/viewproduct&id=...
CVE-2022-46119: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=...
CVE-2022-46073: Improper Neutralization of Input During Web Page Generation
Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting XSS...
CVE-2022-46071: Improper Neutralization of Special Elements used in an SQL Command
There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access...
PT-2022-27753 · Unknown · Helmet Store Showroom Site
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/hss/classes/Master.php?f=delete product" API endpoint. Recommendations: For Helmet Store Showroom Site version...
Helmet Store Showroom Site SQL注入漏洞
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...
CVE-2022-46118
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=productperbrand&bid=...