Vulnerabilities

TI-2022-09067 CVE-2022-25396 · GHSA-cfw4-3j5w-g8w2

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection…

MEDIUM 45

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection vulnerability via the search parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01249 Published 2022-03-02 No fix listed CWE-89

TI-2022-09066 CVE-2022-25395 · GHSA-2r2q-vvq4-5xmm

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple…

MEDIUM 43

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) attacks via the search parameter under the /cbpos/ app.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01046 Published 2022-03-02 No fix listed CWE-79

Vulnerabilities

Filters

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection…

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple…