CVE-2021-46444

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admingroupedit&agID...

CVE-2021-46448

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID...

CVE-2021-46445

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?boxgroupid...

Sql injection

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?boxgroupid...

Sql injection

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admingroupedit&agID...

Sql injection

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID...

Sql injection

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=adminaccessgroupedit&aagID...

Cross site scripting

A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...

CVE-2021-46448

CVE-2021-46448 affects H.H.G Multistore v5.1.0 and earlier. It is a SQL injection vulnerability in /admin/customers.php?page=1&cID, allowing attacker-controlled SQL execution. CVSS v3.1 base score 9.8 (CRITICAL); attack vector NETWORK, no privileges required, no user interaction. Impacts: confide...

CVE-2021-46448

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID...

CVE-2021-46447

A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...

CVE-2021-46447

CVE-2021-46447 affects H.H.G Multistore (v5.1.0 and below). The vulnerability is a cross-site scripting (XSS) flaw exploitable via a crafted payload inserted into the State parameter under the Address Book module, enabling execution of arbitrary web scripts/HTML. The provided sources describe the...

CVE-2021-46446

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=adminaccessgroupedit&aagID...

CVE-2021-46446

CVE-2021-46446 affects H.H.G Multistore v5.1.0 and below, with a SQL injection vulnerability exposed via /admin/admin.php?module=admin_access_group_edit&aagID. Root cause: injectable SQL parameter in admin_access_group_edit handler. Impact (per sources): high/critical across confidentiality, inte...

CVE-2021-46445

CVE-2021-46445 affects H.H.G Multistore v5.1.0 and below. A SQL injection vulnerability exists in /admin/categories.php?box_group_id, enabling injection through the specified parameter. The entry is corroborated by multiple sources (NVD/CVE lists) and situates the impact as disclosed, with CVSS c...

CVE-2021-46444

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admingroupedit&agID...

CVE-2021-46444

H.H.G Multistore (v5.1.0 and below) is affected by a SQL injection in the admin panel via /admin/admin.php?module=admin_group_edit&agID. The issue arises from improper input handling in that endpoint, enabling attackers to manipulate queries. CVSS data indicates high impact (C/I/A high with CVSS3...

CVE-2021-46445

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?boxgroupid...

H.H.G. Multistore SQL注入漏洞

H.H.G. Multistore is a software designed to manage multiple stores from the German company H.H.G. Multistore. A security vulnerability exists in H.H.G. Multistore v5.1.0 and below that allows an attacker to perform SQL injection via /admin/categories.php?boxgroupid...

H.H.G. Multistore 跨站脚本漏洞

H.H.G. Multistore is a software designed to manage multiple stores from H.H.G. Multistore, Germany. A security vulnerability exists in H.H.G. Multistore v5.1.0 and below that allows an attacker to execute arbitrary web script or HTML via a specially crafted payload inserted into the State paramet...