Read the docs

Shop Beat

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Shop Beat records in CISA KEV

No Shop Beat vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Shop Beat Media Player 6 records MEDIUM

Records

6 records

TI-2022-16612 CVE-2022-36246 · GHSA-3f3f-3r46-6862

Shop Beat Services Vulnerable To Insecure Permissions

Priority MEDIUM 50

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00677 Published 2023-05-30 Fixed in 3.2.57 CWE-264
TI-2022-16613 CVE-2022-36247 · GHSA-vwvx-f9wx-wj6p

Shop Beat Services Vulnerable To IDOR

Priority MEDIUM 48

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00535 Published 2023-05-30 Fixed in 3.2.57 CWE-639
TI-2022-16615 CVE-2022-36250 · GHSA-6845-6cw9-qjpf

Cross Site Request Forgery on Shop Beat Services

Priority MEDIUM 40

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00275 Published 2023-05-30 Fixed in 3.2.57 CWE-352
TI-2022-16610 CVE-2022-36243 · GHSA-mfgv-2fp9-xh3v

Directory Traversal on Shop Beat Services

Priority LOW 31

Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00747 Published 2023-05-30 Fixed in 3.2.57 CWE-548
TI-2022-16614 CVE-2022-36249 · GHSA-293w-8h49-x8x8

Shop Beat Services Vulnerable To Bypass 2FA via APIs

Priority LOW 24

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00356 Published 2023-05-30 Fixed in 3.2.57 CWE-288
TI-2022-16611 CVE-2022-36244 · GHSA-4m2r-xvj2-h94m

Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services

Priority LOW 24

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbe…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00337 Published 2023-05-30 Fixed in 3.2.57 CWE-79
Open these records in search →