VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402.876 vulnerabilities · 1766 actively exploited (CISA KEV)

merchandise online store project ✕Clear filters

20 results

ID	Severity	Summary	Published
CVE-2022-42237	CRITICO9.8	A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.	17/10/2022
CVE-2022-42238	ALTO8.8	A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard.	11/10/2022
CVE-2022-42236	MEDIO5.4	A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form.	11/10/2022
CVE-2022-30423	CRITICO9.8	Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.