CVE-2022-30396

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=inventory/manageinventory&id=...

CVE-2022-30396

CVE-2022-30396 affects Merchandise Online Store v1.0, with a SQL Injection in the admin inventory page (/vloggers_merch/admin/?page=inventory/manage_inventory&id=). The connected sources corroborate an injectable parameter, enabling potential unauthorized data access or modification via the inven...

CVE-2022-30398

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=orders/vieworder&id=...

CVE-2022-30398

CVE-2022-30398 affects Merchandise Online Store v1.0 and is exposed to SQL Injection via the parameter id in /vloggers_merch/admin/?page=orders/view_order&id=. The NVD entry documents a SQLi vulnerability with a CVSS 3.1 base score of 7.2 (HIGH), showing network access, low attack complexity, no ...

CVE-2022-30399

CVE-2022-30399 affects Merchandise Online Store v1.0. The vulnerability is an SQL Injection in the admin page parameter /vloggers_merch/admin/?page=maintenance/manage_category&id= due to unparameterized input in the manage_category handler. Impact described in linked metrics: partial confidential...

CVE-2022-30399

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=maintenance/managecategory&id=...

CVE-2022-30400

CVE-2022-30400 concerns Merchandise Online Store v1.0, vulnerable to SQL Injection in the admin orders view. The flaw is triggered via the URL parameter id on /vloggers_merch/admin/orders/view_order.php?view=user&id=, allowing an attacker to manipulate queries and potentially access or modify dat...

CVE-2022-30400

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user&id=...

CVE-2022-30401

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/?p=viewproduct&id=...

CVE-2022-30401

CVE-2022-30401 affects Merchandise Online Store v1.0, vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id= (unspecified parameter). Exploitation could impact confidentiality, integrity, and availability (CVSS: 3.1 base score 7.2). Connected sources confirm SQLi vulnerability across...

CVE-2022-30402

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=maintenance/managesubcategory&id=...

CVE-2022-30402

CVE-2022-30402 affects Merchandise Online Store v1.0. The connected sources describe a SQL Injection vulnerability exploitable via the admin maintenance page parameter: /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=. The vulnerability is evidenced across multiple feeds (NVD entry...

CVE-2022-30403

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/?p=products&c=...

CVE-2022-30403

CVE-2022-30403 affects Merchandise Online Store v1.0, vulnerable to SQL injection through the URL parameter /vloggers_merch/?p=products&c=. The root cause cited across sources is inadequate input validation/escaping for the c parameter, enabling attackers to manipulate queries. Public references ...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Stor has a security vulnerability that can be exploited by attackers to conduct SQL injection via /vloggersmerch/admin/?page=orders/vieworder&id= attack...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/orders/vieworder.php?view=user&id = SQL injection attack...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers to conduct SQL injection attacks via /vloggersmerch/?p=viewproduct&id=...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that originates in /vloggersmerch/?p=products&c=missing parameter filtering and escaping, which can be exploited by attackers to conduct SQL injection attacks...

Merchandise Online Store 安全漏洞

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store that can be exploited by an attacker to delete arbitrary files...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deletesubcategory to conduct an SQL injection attack...