CVE-2022-30399

CVE-2022-30399 affects Merchandise Online Store v1.0. The vulnerability is an SQL Injection in the admin page parameter /vloggers_merch/admin/?page=maintenance/manage_category&id= due to unparameterized input in the manage_category handler. Impact described in linked metrics: partial confidential...

CVE-2022-30399

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=maintenance/managecategory&id=...

CVE-2022-30400

CVE-2022-30400 concerns Merchandise Online Store v1.0, vulnerable to SQL Injection in the admin orders view. The flaw is triggered via the URL parameter id on /vloggers_merch/admin/orders/view_order.php?view=user&id=, allowing an attacker to manipulate queries and potentially access or modify dat...

CVE-2022-30400

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user&id=...

CVE-2022-30401

CVE-2022-30401 affects Merchandise Online Store v1.0, vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id= (unspecified parameter). Exploitation could impact confidentiality, integrity, and availability (CVSS: 3.1 base score 7.2). Connected sources confirm SQLi vulnerability across...

CVE-2022-30401

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/?p=viewproduct&id=...

CVE-2022-30402

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=maintenance/managesubcategory&id=...

CVE-2022-30402

CVE-2022-30402 affects Merchandise Online Store v1.0. The connected sources describe a SQL Injection vulnerability exploitable via the admin maintenance page parameter: /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=. The vulnerability is evidenced across multiple feeds (NVD entry...

CVE-2022-30403

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/?p=products&c=...

CVE-2022-30403

CVE-2022-30403 affects Merchandise Online Store v1.0, vulnerable to SQL injection through the URL parameter /vloggers_merch/?p=products&c=. The root cause cited across sources is inadequate input validation/escaping for the c parameter, enabling attackers to manipulate queries. Public references ...

CVE-2022-26308

Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration Credential store where a user with the role of Operator Write could create, delete, view existing keys which are outside the intended role...

GHSA-HMX6-GC2P-5P82 Nablarch Incomplete Cryptography

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...

GHSA-FJ69-P8F6-Q97H Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password

With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions prior to 2.2.5 and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, old Password Reset Links are not expired after the user changes their current email address to a new one. This vulnerability is applicable onl...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/orders/vieworder.php?view=user&id = SQL injection attack...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers to conduct SQL injection attacks via /vloggersmerch/?p=viewproduct&id=...

Merchandise Online Store 安全漏洞

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store that can be exploited by an attacker to delete arbitrary files...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=product/manageproduct&id= to conduct SQL injection attack...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deletesubcategory to conduct an SQL injection attack...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Stor has a security vulnerability that can be exploited by attackers to conduct SQL injection via /vloggersmerch/admin/?page=orders/vieworder&id= attack...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deletefeatured to conduct SQL injection attack...