Merchandise Online Store Project » Merchandise Online Store » 1.0 : Security Vulnerabilities, CVEs, CVSS score >= 6
A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard.
Max CVSS
8.8
EPSS Score
0.09%
Published
2022-10-11
Updated
2022-10-11
A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.
Max CVSS
9.8
EPSS Score
0.15%
Published
2022-10-17
Updated
2022-10-19
Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-24
Updated
2022-05-28
Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.
Max CVSS
9.8
EPSS Score
0.30%
Published
2022-06-02
Updated
2022-06-10
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.
Max CVSS
9.8
EPSS Score
0.18%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img.
Max CVSS
6.5
EPSS Score
0.08%
Published
2022-05-13
Updated
2022-05-23
19 vulnerabilities found