Lucene search
+L

219 matches found

Cvelist
Cvelist
added 2022/05/27 1:38 p.m.30 views

CVE-2022-30423

Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution RCE vulnerability in the user profile upload point in the system information...

9.9AI score0.0179EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/27 1:38 p.m.70 views

CVE-2022-30423

CVE-2022-30423 affects Merchandise Online Store v1.0 by oretnom23. The vulnerability is described as an arbitrary code execution (RCE) in the user profile upload point on the system information page. The available connected documents corroborate an RCE impact but do not provide technical details ...

9.8CVSS9.7AI score0.0179EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2022/05/26 12:00 a.m.45 views

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-66681)

Merchandise Online Store is a merchandise online store system. merchandise Online Store version 1.0 is vulnerable to SQL injection, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=delete product to conduct SQL injection attacks...

7.5CVSS4.4AI score0.01079EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2022/05/24 1:15 p.m.8 views

CVE-2022-30454

Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteproduct...

9.8CVSS7.4AI score0.01079EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/24 1:15 p.m.4 views

CVE-2022-30454

Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteproduct...

9.8CVSS7.4AI score0.01079EPSS
SaveExploits1References2
NVD
NVD
added 2022/05/24 1:15 p.m.22 views

CVE-2022-30454

Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteproduct...

9.8CVSS0.01079EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/24 12:53 p.m.75 views

CVE-2022-30454

Summary: CVE-2022-30454 affects Merchandise Online Store 1.0 and is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product. What is affected: The application Merchandise Online Store 1.0; vulnerability is in the delete_product path parameter. Nature of vulnerability: ...

9.8CVSS9.8AI score0.01079EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/24 12:53 p.m.31 views

CVE-2022-30454

Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteproduct...

10AI score0.01079EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/05/24 12:00 a.m.14 views

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store version 1.0 is vulnerable to SQL injection, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=delete product to conduct SQL injection attacks...

9.8CVSS5.8AI score0.01079EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/05/17 12:00 a.m.17 views

Merchandise Online Store SQL注入漏洞(CNVD-2022-40274)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers to conduct SQL injection via /vloggersmerch/classes/Master.php?f=deletecart attack...

9.8CVSS4.3AI score0.01079EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.18 views

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40273)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers to conduct SQL injection attacks via /vloggersmerch/?p=viewproduct&id=...

7.2CVSS4.2AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.14 views

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40279)

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers to conduct SQL injection attacks via /vloggersmerch/classes/Master.php?f=payorder...

9.8CVSS4.2AI score0.00899EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.22 views

Merchandise Online Store SQL注入漏洞(CNVD-2022-40280)

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deletefeatured to conduct SQL injection attack...

9.8CVSS4.3AI score0.01079EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.19 views

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40276)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deletesubcategory to conduct an SQL injection attack...

9.8CVSS4.2AI score0.01079EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.52 views

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40278)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deletecategory SQL injection attack...

9.8CVSS4.2AI score0.01079EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.45 views

Merchandise Online Store SQL注入漏洞(CNVD-2022-40269)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/orders/vieworder.php?view=user&id = SQL injection attack...

7.2CVSS4.4AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.24 views

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40268)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that originates in /vloggersmerch/?p=products&c=missing parameter filtering and escaping, which can be exploited by attackers to conduct SQL injection attacks...

7.2CVSS2.8AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.17 views

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40270)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=maintenance/managesub category&id= to conduct an SQL injection attack...

7.2CVSS4.5AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.25 views

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40271)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=maintenance/managecategory& id= to conduct an SQL injection attack...

7.2CVSS4.2AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.32 views

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40275)

Merchandise Online Store is a merchandise online store system. merchandise Online Stor has a security vulnerability that can be exploited by attackers to conduct SQL injection via /vloggersmerch/admin/?page=orders/vieworder&id= attack...

7.2CVSS4.2AI score0.00956EPSS
SaveExploits1References1
Rows per page
Query Builder