Vulnerabilities

TI-2021-21241 CVE-2021-46448 · GHSA-4cqg-vc7j-pmhv

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability…

MEDIUM 44

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01195 Published 2022-01-28 No fix listed CWE-89

TI-2021-21240 CVE-2021-46447 · GHSA-2jg4-p688-m2mm

A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows…

LOW 25

A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book mod…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0055 Published 2022-01-28 No fix listed CWE-79

TI-2021-21239 CVE-2021-46446 · GHSA-hr82-qcw6-r4j6

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability…

MEDIUM 44

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_access_group_edit&aagID.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01211 Published 2022-01-28 No fix listed CWE-89

TI-2021-21238 CVE-2021-46445 · GHSA-73mv-wv5r-8r3c

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability…

MEDIUM 44

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?box_group_id.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01195 Published 2022-01-28 No fix listed CWE-89

TI-2021-21237 CVE-2021-46444 · GHSA-7j6c-7628-j453

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability…

MEDIUM 44

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_group_edit&agID.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01195 Published 2022-01-28 No fix listed CWE-89

Vulnerabilities

Filters

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability…

A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows…

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability…

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability…

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability…