3 matches found
CVE-2022-46073
Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).
CVE-2022-46072
Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.
CVE-2022-46074
Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.