Helmet Store Showroom Site Project

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

Helmet Store Showroom Site Project records in CISA KEV

No Helmet Store Showroom Site Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Helmet Store Showroom Site 16 records HIGH

Records

16 records

TI-2022-22752 CVE-2022-46071 · GHSA-w7m8-qp22-mr27

There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page.

HIGH 82

There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04696 Published 2022-12-14 No fix listed CWE-89

TI-2022-23255 CVE-2022-46949 · GHSA-p87h-qjxg-9pg4

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 67

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_helmet.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0083 Published 2023-01-13 No fix listed CWE-89

TI-2022-23254 CVE-2022-46947 · GHSA-hvh2-7fmv-gqh9

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 67

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0083 Published 2023-01-13 No fix listed CWE-89

TI-2022-23253 CVE-2022-46946 · GHSA-mf4h-9xx6-rj3x

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 67

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_brand.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0083 Published 2023-01-13 No fix listed CWE-89

TI-2022-22964 CVE-2022-46472 · GHSA-mxgm-jvw2-28xj

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 67

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00734 Published 2023-01-12 No fix listed CWE-89

TI-2022-22779 CVE-2022-46127 · GHSA-7v7v-hxjv-4792

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=delete_product.

HIGH 67

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=delete_product.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00843 Published 2022-12-14 No fix listed CWE-89

TI-2022-22778 CVE-2022-46126 · GHSA-832p-5wq2-22r3

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=.

HIGH 67

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00843 Published 2022-12-14 No fix listed CWE-89

TI-2022-22777 CVE-2022-46125 · GHSA-g537-8ccf-73rg

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=.

HIGH 67

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00843 Published 2022-12-14 No fix listed CWE-89

TI-2022-22776 CVE-2022-46124 · GHSA-8gxx-fw79-3cfh

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manage_user&id=.

HIGH 67

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manage_user&id=.