Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...

CVE-2022-46073

CVE-2022-46073 affects Helmet Store Showroom 1.0 and is described in connected documents as a Cross Site Scripting (XSS) vulnerability. The NVD/NIST entry lists a CVSS v3.1 base score of 6.1 (Medium) with network attack vector, user interaction required, and a changed scope, affecting confidentia...

CVE-2022-46123: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/managecategory.php?id=...