451 matches found
Helmet Store Showroom Site SQL注入漏洞
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from its /hss/classes/Master.php?f=deleteproduct...
Helmet Store Showroom Site SQL注入漏洞
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...
CVE-2022-46117
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=viewproduct&id=...
CVE-2022-46123
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/managecategory.php?id=...
CVE-2022-46127
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...
CVE-2022-46127
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...
CVE-2022-46126
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/managebrand.php?id=...
CVE-2022-46123
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/managecategory.php?id=...
CVE-2022-46124
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manageuser&id=...
CVE-2022-46074
Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery CSRF. An unauthenticated user can add an admin account due to missing CSRF protection...
CVE-2022-46072
Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection...
CVE-2022-46073
Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting XSS...
CVE-2022-46118
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=productperbrand&bid=...
CVE-2022-46119
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=...
CVE-2022-46120
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/viewproduct&id=...
CVE-2022-46071
There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access...
PT-2022-27731 · Unknown · Helmet Store Showroom
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom version 1.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website. Recommendations: For Helmet Stor...
PT-2022-27729 · Unknown · Helmet Store Showroom
Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom version 1.0 Description: The issue is related to a SQL Injection vulnerability at the Login Page. This vulnerability can be exploited to bypass admin access. Recommendations: For Helmet Store Showroom version 1.0, consid...
CVE-2022-46117: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=viewproduct&id=...
CVE-2022-46126: Improper Neutralization of Special Elements used in an SQL Command
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/managebrand.php?id=...