CVE-2022-46124

Affected software: Helmet Store Showroom Site v1.0. The vulnerability is a SQL Injection in the admin endpoint at /hss/admin/?page=user/manage_user&id= (or similar). Root cause: untrusted input in the id parameter allows manipulation of database queries, with high impact on confidentiality, integ...

CVE-2022-46125

Vulnerability summary: CVE-2022-46125 affects Helmet Store Showroom Site v1.0, with a SQL Injection flaw exposed via the admin endpoint /hss/admin/?page=client/manage_client&id=. The connected sources consistently describe an injection in the id parameter, implying a backend query concatenation r...

CVE-2022-46126

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/managebrand.php?id=...

CVE-2022-46119

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=...

CVE-2022-46118

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=productperbrand&bid=...

PT-2022-27742 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/hss/?page=view product&id=" API endpoint, specifically through the id variable. There is no information provid...

CVE-2022-46071

There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. Allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from its /hss/classes/Master.php?f=deleteproduct...

CVE-2022-46124

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manageuser&id=...

PT-2022-27750 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue concerns SQL Injection via the "/hss/admin/?page=user/manage user&id=" API endpoint. This allows for potential manipulation of database queries. No information is provided about th...

CVE-2022-46073

CVE-2022-46073 affects Helmet Store Showroom 1.0 and is described in connected documents as a Cross Site Scripting (XSS) vulnerability. The NVD/NIST entry lists a CVSS v3.1 base score of 6.1 (Medium) with network attack vector, user interaction required, and a changed scope, affecting confidentia...

CVE-2022-46073

Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2022-46123

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/managecategory.php?id=...

CVE-2022-46123

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/managecategory.php?id=...

CVE-2022-46118

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=productperbrand&bid=...

CVE-2022-46123

CVE-2022-46123 affects the Helmet Store Showroom Site v1.0. The issue is a SQL Injection in the admin endpoint at /hss/admin/categories/manage_category.php?id=, allowing unauthorized database queries. The CVSS v3.1 data shows a base score of 7.2 (HIGH), with Network attack vector, Low attack comp...

Helmet Store Showroom Site SQL注入漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from a SQL injection on the login page and can be...

CVE-2022-46120

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/viewproduct&id=...

CVE-2022-46120

CVE-2022-46120 affects Helmet Store Showroom Site v1.0, with a reported SQL Injection in the admin endpoint “/hss/admin/?page=products/view_product&id=”. The root cause is unsanitized user input in the id parameter, enabling an attacker to manipulate SQL queries. The CVSS v3.1 base score is 7.2 (...

CVE-2022-46071

Affected software: Helmet Store Showroom v1.0 (Login Page). Vulnerability: SQL Injection that can bypass admin access. Root cause (as stated): Improper handling of user input in SQL queries on the login page. Impact (per sources): Potential to extract/modify data and bypass authentication; contex...