Priority HIGH 67
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_helmet.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0083 · Published 2023-01-13 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0083 · Published 2023-01-13 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_brand.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0083 · Published 2023-01-13 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00734 · Published 2023-01-12 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=delete_product.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00843 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00843 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00843 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manage_user&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00762 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/manage_category.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00762 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/view_category.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00762 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manage_product&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00762 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/view_product&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00762 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00762 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 67
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=product_per_brand&bid=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00762 · Published 2022-12-14 · No fix listed CWE-89
Priority LOW 35
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00762 · Published 2022-12-14 · No fix listed CWE-89
Priority HIGH 82
There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04696 · Published 2022-12-14 · No fix listed CWE-89
THREATIST.IORead the docs