Vulnerabilities (CVE)

Filtered by vendor Merchandise Online Store Project Subscribe
Filtered by product Merchandise Online Store
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-42238 1 Merchandise Online Store Project 1 Merchandise Online Store 2023-08-08 N/A 8.8 HIGH
A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard.
CVE-2022-30400 1 Merchandise Online Store Project 1 Merchandise Online Store 2022-05-23 6.5 MEDIUM 7.2 HIGH
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=.
CVE-2022-30401 1 Merchandise Online Store Project 1 Merchandise Online Store 2022-05-23 6.5 MEDIUM 7.2 HIGH
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=.
CVE-2022-30398 1 Merchandise Online Store Project 1 Merchandise Online Store 2022-05-23 6.5 MEDIUM 7.2 HIGH
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=.
CVE-2022-30399 1 Merchandise Online Store Project 1 Merchandise Online Store 2022-05-23 6.5 MEDIUM 7.2 HIGH
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=.
CVE-2022-30396 1 Merchandise Online Store Project 1 Merchandise Online Store 2022-05-23 6.5 MEDIUM 7.2 HIGH
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=.
CVE-2022-30393 1 Merchandise Online Store Project 1 Merchandise Online Store 2022-05-23 6.5 MEDIUM 7.2 HIGH
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=.
CVE-2022-30402 1 Merchandise Online Store Project 1 Merchandise Online Store 2022-05-23 6.5 MEDIUM 7.2 HIGH
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=.