Directory traversal

Shop Beat Solutions pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2....

Cross site request forgery (csrf)

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery CSRF...

Cross site scripting

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting XSS vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za...

CVE-2022-36246 Shop Beat Services Vulnerable To Insecure Permissions

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions...

CVE-2022-36244 Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting XSS vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za...

CVE-2022-36247 Shop Beat Services Vulnerable To IDOR

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za...

CVE-2022-36244

Shop Beat Media Player (versions 2.5.95–3.2.57) is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities in the Shop Beat Control Panel (URLs: www.shopbeat.co.za, controlpanel.shopbeat.co.za). The root cause is stored XSS in the control panel exposed to user input; impact include...

CVE-2022-36246 Shop Beat Services Vulnerable To Insecure Permissions

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions...

CVE-2022-36249 Shop Beat Services Vulnerable To Bypass 2FA via APIs

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API...

CVE-2022-36250 Cross Site Request Forgery on Shop Beat Services

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2022-36247 Shop Beat Services Vulnerable To IDOR

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za...

CVE-2022-36243 Directory Traversal on Shop Beat Services

Shop Beat Solutions pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2....

CVE-2022-36249

Shop Beat Media Player v2.5.95–v3.2.57 is affected by a vulnerability that allows bypassing secondary authentication (2FA) at the API level. After login, an attacker can use a bearer token or jsession ID to access APIs without entering the 2FA code, specifically impacting Controlpanel Lite. Root ...

CVE-2022-36243 Directory Traversal on Shop Beat Services

Shop Beat Solutions pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2....

CVE-2022-36250

Shop Beat Media Player versions 2.5.95 through 3.2.57 are affected by a Cross Site Request Forgery (CSRF) vulnerability. The vulnerability enables CSRF attacks that could trick authenticated users into performing unintended actions. The connected PT-2023-13467 entry notes a CSRF issue and recomme...

CVE-2022-36244 Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting XSS vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za...

CVE-2022-36246

CVE-2022-36246 affects Shop Beat Media Player versions 2.5.95 through 3.2.57. The issue is an insecure permissions vulnerability in the product, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 9.8, Network attack, no user interaction). Root cause and technical exploit ...

CVE-2022-36247

Shop Beat Media Player versions 2.5.95–3.2.57 are vulnerable to an Insecure Direct Object Reference (IDOR) via controlpanel.shopbeat.co.za. The root cause is IDOR, leading to unauthorized access to resources; CVSS 3.1 indicates high confidentiality and integrity impact (score 9.1). No patch/versi...

CVE-2022-36243

CVE-2022-36243 affects Shop Beat Media Player (versions 2.5.95–3.2.57) and Shop Beat Studio (versions prior to 3.2.57) on ARM. The issue is a Directory Traversal via the server.shopbeat.co.za endpoint, leading to Information Exposure Through Directory Listing. Exploitation status is not detailed ...

CVE-2022-36246

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions...