CVE-2022-46117

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=viewproduct&id=...

PT-2022-27752 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns SQL Injection. It can be exploited via the "/hss/admin/brands/manage brand.php" API endpoint, specifically through the id variable. Recommendations: For Helmet Store...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from an SQL injection vulnerability via...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.1, which stems from an SQL injection vulnerability via...

CVE-2022-46125: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...

CVE-2022-46125

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...

CVE-2022-46072

CVE-2022-46072 affects Helmet Store Showroom v1.0 and is described as an unauthenticated SQL Injection vulnerability. The provided connected documents confirm the issue type (SQL injection) and affected software (Helmet Store Showroom v1.0) but do not supply concrete details on the root cause spe...

CVE-2022-46127

CVE-2022-46127 affects Helmet Store Showroom Site v1.0. The vulnerability is a SQL Injection in the endpoint /hss/classes/Master.php?f=delete_product (Master.php delete_product function), enabling database impact with high severity (CVSS 3.1: HIGH, vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Con...

CVE-2022-46072: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection...

PT-2022-27748 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the "/hss/admin/categories/view category.php?id=" API endpoint, specifically through the id variable. Recommendations: For Helm...

CVE-2022-46125

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient&id=...

CVE-2022-46074: Cross-Site Request Forgery (CSRF)

Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery CSRF. An unauthenticated user can add an admin account due to missing CSRF protection...

CVE-2022-46127: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...

CVE-2022-46122: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/viewcategory.php?id=...

CVE-2022-46120: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/viewproduct&id=...

CVE-2022-46119: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=...

CVE-2022-46073: Improper Neutralization of Input During Web Page Generation

Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2022-46071: Improper Neutralization of Special Elements used in an SQL Command

There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access...

CVE-2022-46118: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=productperbrand&bid=...

PT-2022-27753 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/hss/classes/Master.php?f=delete product" API endpoint. Recommendations: For Helmet Store Showroom Site version...