CVE-2022-46125

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...

PT-2022-27753 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/hss/classes/Master.php?f=delete product" API endpoint. Recommendations: For Helmet Store Showroom Site version...