CVE-2022-46126

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/managebrand.php?id=...

CVE-2022-46073

Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2022-46121

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manageproduct&id=...

CVE-2022-46122

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/viewcategory.php?id=...

Helmet Store Showroom Site 跨站脚本漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from the presence of cross-site scripting attacks X...

CVE-2022-46072

CVE-2022-46072 affects Helmet Store Showroom v1.0 and is described as an unauthenticated SQL Injection vulnerability. The provided connected documents confirm the issue type (SQL injection) and affected software (Helmet Store Showroom v1.0) but do not supply concrete details on the root cause spe...

PT-2022-27746 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/hss/admin/?page=products/view product&id=" endpoint. The id variable is vulnerable to injection attacks...

CVE-2022-46119

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=...

PT-2022-27732 · Unknown · Helmet Store Showroom

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom version 1.0 Description: The issue allows an unauthenticated user to add an admin account due to missing Cross Site Request Forgery CSRF protection. This enables an attacker to perform actions on behalf of other users...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...

CVE-2022-46117

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=viewproduct&id=...

CVE-2022-46125

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...

PT-2022-27730 · Unknown · Helmet Store Showroom

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom version 1.0 Description: The issue is related to an unauthenticated SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2022-27729 · Unknown · Helmet Store Showroom

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom version 1.0 Description: The issue is related to a SQL Injection vulnerability at the Login Page. This vulnerability can be exploited to bypass admin access. Recommendations: For Helmet Store Showroom version 1.0, consid...

PT-2022-27753 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/hss/classes/Master.php?f=delete product" API endpoint. Recommendations: For Helmet Store Showroom Site version...

CVE-2022-46125

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...

CVE-2022-46118

Helmet Store Showroom Site v1.0 is affected by an SQL Injection vulnerability in the /hss/?page=product_per_brand&bid= endpoint. The root cause is unsanitized input in the bid parameter, enabling attackers to manipulate queries. The CVE is rated with CVSS v3.1 base score 7.2 (HIGH) with network a...

CVE-2022-46117

CVE-2022-46117 affects Helmet Store Showroom Site v1.0. A SQL Injection flaw exists in the product view endpoint ( /hss/?page=view_product&id= ), with root cause an unsafely handled id parameter. The published CVSS 3.1 vector indicates HIGH impact across confidentiality, integrity, and availabili...

CVE-2022-46121

CVE-2022-46121 affects Helmet Store Showroom Site v1.0. A SQL injection vulnerability exists in the admin risk path: /hss/admin/?page=products/manage_product&id=, due to unsanitized user input. CVSS v3.1 metrics indicate a HIGH severity (7.2) with network attack vector, low attack complexity, and...

CVE-2022-46127

CVE-2022-46127 affects Helmet Store Showroom Site v1.0. The vulnerability is a SQL Injection in the endpoint /hss/classes/Master.php?f=delete_product (Master.php delete_product function), enabling database impact with high severity (CVSS 3.1: HIGH, vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Con...