CVE-2022-46120

creationtimestamp| type| source ---|---|--- 2022-12-14 20:23:09+00:00| seen| https://t.me/cibsecurity/54533 2025-04-22 14:03:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12851...

CVE-2022-46120

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/viewproduct&id=...

CVE-2022-46120

CVE-2022-46120 affects Helmet Store Showroom Site v1.0, with a reported SQL Injection in the admin endpoint “/hss/admin/?page=products/view_product&id=”. The root cause is unsanitized user input in the id parameter, enabling an attacker to manipulate SQL queries. The CVSS v3.1 base score is 7.2 (...