CVE-2022-30004
Published Sep 26, 2022Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQ…
Vendor archive
online_market_place_site_project CVEs
Beta · best-effort4 CVEs tagged to vendor online_market_place_site_project — 1 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2022-30003
Published Sep 26, 2022Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register as a Seller then create new products containing XSS payload…
CVE-2022-29628
Published Jun 2, 2022A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected…
CVE-2022-29627
Published Jun 2, 2022An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers.
Showing 1-4 of 4 CVEsPage 1 of 1