Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Shop Beat Clear all filters
TI-2022-16615 CVE-2022-36250 · GHSA-6845-6cw9-qjpf

Cross Site Request Forgery on Shop Beat Services

Priority MEDIUM 40

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00275 Published 2023-05-30 Fixed in 3.2.57 CWE-352
TI-2022-16614 CVE-2022-36249 · GHSA-293w-8h49-x8x8

Shop Beat Services Vulnerable To Bypass 2FA via APIs

Priority LOW 24

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00356 Published 2023-05-30 Fixed in 3.2.57 CWE-288
TI-2022-16613 CVE-2022-36247 · GHSA-vwvx-f9wx-wj6p

Shop Beat Services Vulnerable To IDOR

Priority MEDIUM 48

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00535 Published 2023-05-30 Fixed in 3.2.57 CWE-639
TI-2022-16612 CVE-2022-36246 · GHSA-3f3f-3r46-6862

Shop Beat Services Vulnerable To Insecure Permissions

Priority MEDIUM 50

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00677 Published 2023-05-30 Fixed in 3.2.57 CWE-264
TI-2022-16611 CVE-2022-36244 · GHSA-4m2r-xvj2-h94m

Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services

Priority LOW 24

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbe…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00337 Published 2023-05-30 Fixed in 3.2.57 CWE-79
TI-2022-16610 CVE-2022-36243 · GHSA-mfgv-2fp9-xh3v

Directory Traversal on Shop Beat Services

Priority LOW 31

Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00747 Published 2023-05-30 Fixed in 3.2.57 CWE-548