Vulnerabilities (CVE)

Filtered by vendor Online Market Place Site Project Subscribe

CVSS v3 Filter

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Search

Total 2 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2022-29627	1 Online Market Place Site Project	1 Online Market Place Site	2022-06-12	4.0 MEDIUM	4.3 MEDIUM
An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers.
CVE-2022-29628	1 Online Market Place Site Project	1 Online Market Place Site	2022-06-09	3.5 LOW	5.4 MEDIUM
A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter.