Product Show Room Site
by Oretnom23
CVEs (15)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-32415 | Hig | 0.57 | 8.8 | 0.01 | Jul 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/view_product&id=. | ||
| CVE-2024-33303 | Hig | 0.53 | 8.2 | 0.01 | May 2, 2024 | SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" under Add Users. | ||
| CVE-2022-32416 | Hig | 0.47 | 7.2 | 0.01 | Jul 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_product. | ||
| CVE-2022-32363 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/view_category.php?id=. | ||
| CVE-2022-32362 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_category.php?id=. | ||
| CVE-2022-32359 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_category. | ||
| CVE-2022-32358 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_inquiry. | ||
| CVE-2022-32355 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/view_product&id=. | ||
| CVE-2022-32354 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manage_user&id=. | ||
| CVE-2022-32367 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/view_inquiry&id=. | ||
| CVE-2022-32366 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/view_field.php?id=. | ||
| CVE-2022-32365 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/manage_field.php?id=. | ||
| CVE-2022-32364 | Hig | 0.47 | 7.2 | 0.01 | Jun 14, 2022 | Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manage_product&id=. | ||
| CVE-2024-33304 | Med | 0.40 | 6.1 | 0.00 | May 1, 2024 | SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" under Add Users. | ||
| CVE-2024-33302 | Med | 0.34 | 5.3 | 0.00 | May 2, 2024 | SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting (XSS) via "Middle Name" under Add Users. |
- risk 0.57cvss 8.8epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/view_product&id=.
- risk 0.53cvss 8.2epss 0.01
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" under Add Users.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_product.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/view_category.php?id=.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_category.php?id=.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_category.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_inquiry.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/view_product&id=.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manage_user&id=.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/view_inquiry&id=.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/view_field.php?id=.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/manage_field.php?id=.
- risk 0.47cvss 7.2epss 0.01
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manage_product&id=.
- risk 0.40cvss 6.1epss 0.00
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" under Add Users.
- risk 0.34cvss 5.3epss 0.00
SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting (XSS) via "Middle Name" under Add Users.