Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Merchandise_online_store
(Merchandise_online_store_project)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 20 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-05-13 | CVE-2022-30393 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=. | Merchandise_online_store | 7.2 | ||
| 2022-05-13 | CVE-2022-30395 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart. | Merchandise_online_store | 9.8 | ||
| 2022-05-13 | CVE-2022-30396 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=. | Merchandise_online_store | 7.2 | ||
| 2022-05-13 | CVE-2022-30398 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=. | Merchandise_online_store | 7.2 | ||
| 2022-05-13 | CVE-2022-30399 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=. | Merchandise_online_store | 7.2 | ||
| 2022-05-13 | CVE-2022-30400 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=. | Merchandise_online_store | 7.2 | ||
| 2022-05-13 | CVE-2022-30401 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=. | Merchandise_online_store | 7.2 | ||
| 2022-05-13 | CVE-2022-30402 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=. | Merchandise_online_store | 7.2 | ||
| 2022-05-24 | CVE-2022-30454 | Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product. | Merchandise_online_store | 9.8 | ||
| 2022-06-02 | CVE-2022-30423 | Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information. | Merchandise_online_store | 9.8 |