Tra cứu CVE

Mọi CVE đã công bố cùng các advisory mã nguồn mở (NVD, OSV, GitHub), kèm CVSS, EPSS và cho biết lỗ hổng có đang bị khai thác thực tế hay không (CISA KEV). Cập nhật mỗi vài giờ. Các bài quét đối chiếu dữ liệu này với công nghệ phát hiện được trên site.

402.685 lỗ hổng · 1.766 đang bị khai thác (CISA KEV)

merchandise online store ✕Xoá bộ lọc

20 kết quả

Mã	Mức độ	Mô tả	Công bố
CVE-2022-42237	NGHIÊM TRỌNG9.8	A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.	17/10/2022
CVE-2022-42238	CAO8.8	A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard.	11/10/2022
CVE-2022-42236	TRUNG BÌNH5.4	A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form.	11/10/2022
CVE-2022-30423	NGHIÊM TRỌNG9.8	Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.	02/06/2022
CVE-2022-30454	NGHIÊM TRỌNG9.8	Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product.	24/05/2022
CVE-2022-30402	CAO7.2	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=.	13/05/2022
CVE-2022-30401	CAO7.2	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=.	13/05/2022
CVE-2022-30400	CAO7.2	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=.	13/05/2022
CVE-2022-30399	CAO7.2	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=.	13/05/2022
CVE-2022-30398	CAO7.2	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=.	13/05/2022
CVE-2022-30396	CAO7.2	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=.	13/05/2022
CVE-2022-30395	NGHIÊM TRỌNG9.8	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.	13/05/2022
CVE-2022-30393	CAO7.2	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=.	13/05/2022
CVE-2022-30392	NGHIÊM TRỌNG9.8	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category.	13/05/2022
CVE-2022-30391	NGHIÊM TRỌNG9.8	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category.	13/05/2022
CVE-2022-30387	NGHIÊM TRỌNG9.8	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.	13/05/2022
CVE-2022-30386	NGHIÊM TRỌNG9.8	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.	13/05/2022
CVE-2022-30385	NGHIÊM TRỌNG9.8	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order.	13/05/2022
CVE-2022-30384	NGHIÊM TRỌNG9.8	Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory.	13/05/2022
CVE-2022-30381	TRUNG BÌNH6.5	Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img.	13/05/2022