Merchandise Online Store Project » Merchandise Online Store » 1.0 : Security Vulnerabilities, CVEs, CVSS score >= 9
A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.
Max CVSS
9.8
EPSS Score
0.15%
Published
2022-10-17
Updated
2022-10-19
Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-24
Updated
2022-05-28
Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.
Max CVSS
9.8
EPSS Score
0.30%
Published
2022-06-02
Updated
2022-06-10
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.
Max CVSS
9.8
EPSS Score
0.18%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory.
Max CVSS
9.8
EPSS Score
0.17%
Published
2022-05-13
Updated
2022-05-23
10 vulnerabilities found