Lucene search

Helmet Store Showroom Security Vulnerabilities

cve

CVE-2022-46072

Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.

9.8CVSS

9.6AI Score

0.002EPSS

2022-12-14 06:15 PM

cve

CVE-2022-46073

Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).

6.1CVSS

6AI Score

0.001EPSS

2022-12-14 05:15 PM

cve

CVE-2022-46074

Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.

8.8CVSS

8.7AI Score

0.002EPSS

2022-12-14 05:15 PM