12108 matches found
CVE-2022-30386
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletefeatured...
CVE-2022-30386
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured. The CVE-2022-30386 entry indicates a high-severity, network-exposed issue with a CVSS v3.1 base score of 9.8 (CRITICAL) and a CVSSv2 base score of 7.5 (HIGH). The vulnerability a...
CVE-2022-30387
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=payorder...
CVE-2022-30387
CVE-2022-30387 relates to a SQL injection vulnerability in Merchandise Online Store v1.0. The vulnerability is triggered via the request to /vloggers_merch/classes/Master.php?f=pay_order, affecting the application component handling pay_order. According to the connected records, the issue produce...
CVE-2022-30391
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category. Root cause is unsafe SQL construction in that endpoint, enabling attackers to manipulate queries. Documented impact aligns with high severity (CVE-2022-30391) impacting confident...
CVE-2022-30391
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletecategory...
CVE-2022-30392
Affected product/entry: Merchandise Online Store v1.0. Vulnerability/impact: SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category, caused by improper handling of input leading to potential partial/high impact on confidentiality, integrity, and availability. CVSS data in the ...
CVE-2022-30392
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletesubcategory...
CVE-2022-30393
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=product/manageproduct&id=...
CVE-2022-30393
Merchandise Online Store v1.0 is affected by a SQL Injection in the admin interface: /vloggers_merch/admin/?page=product/manage_product&id=. The CVE record consistently references an injectable id parameter on the product management page as the vulnerability vector. The connected sources corrobor...
CVE-2022-30395
The CVE-2022-30395 entry applies to Merchandise Online Store v1.0, where the vulnerability is a SQL Injection in the web path /vloggers_merch/classes/Master.php?f=delete_cart. The root cause is an injectable parameter in that script, enabling improper SQL execution. Documented impact indicates hi...
CVE-2022-30395
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletecart...
CVE-2022-30396
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=inventory/manageinventory&id=...
CVE-2022-30396
CVE-2022-30396 affects Merchandise Online Store v1.0, with a SQL Injection in the admin inventory page (/vloggers_merch/admin/?page=inventory/manage_inventory&id=). The connected sources corroborate an injectable parameter, enabling potential unauthorized data access or modification via the inven...
CVE-2022-30398
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=orders/vieworder&id=...
CVE-2022-30398
CVE-2022-30398 affects Merchandise Online Store v1.0 and is exposed to SQL Injection via the parameter id in /vloggers_merch/admin/?page=orders/view_order&id=. The NVD entry documents a SQLi vulnerability with a CVSS 3.1 base score of 7.2 (HIGH), showing network access, low attack complexity, no ...
CVE-2022-30399
CVE-2022-30399 affects Merchandise Online Store v1.0. The vulnerability is an SQL Injection in the admin page parameter /vloggers_merch/admin/?page=maintenance/manage_category&id= due to unparameterized input in the manage_category handler. Impact described in linked metrics: partial confidential...
CVE-2022-30399
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=maintenance/managecategory&id=...
CVE-2022-30400
CVE-2022-30400 concerns Merchandise Online Store v1.0, vulnerable to SQL Injection in the admin orders view. The flaw is triggered via the URL parameter id on /vloggers_merch/admin/orders/view_order.php?view=user&id=, allowing an attacker to manipulate queries and potentially access or modify dat...