CVE-2022-46127

CVE-2022-46127 affects Helmet Store Showroom Site v1.0. The vulnerability is a SQL Injection in the endpoint /hss/classes/Master.php?f=delete_product (Master.php delete_product function), enabling database impact with high severity (CVSS 3.1: HIGH, vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Con...

CVE-2022-46122

CVE-2022-46122 affects Helmet Store Showroom Site v1.0; SQL Injection via /hss/admin/categories/view_category.php?id= allows remote attacker to potentially access/modify data (C/I/A: HIGH). PoC available; exploitation can occur with network access, no UI interaction, and requires some privileges....