Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
19 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.2) | 0.82% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 13/1/2023 | 17/6/2026 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_helmet. | |
| Modificada | Alta (7.2) | 0.82% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 13/1/2023 | 17/6/2026 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category. | |
| Modificada | Alta (7.2) | 0.82% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 13/1/2023 | 17/6/2026 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_brand. | |
| Modificada | Alta (7.2) | 0.73% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 12/1/2023 | 17/6/2026 | Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete. | |
| Modificada | Crítica (9.8) | 1.1% | — | Helmet Store Showroom Project Helmet Store Showroom | 14/12/2022 | 17/6/2026 | Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection. | |
| Modificada | Crítica (9.8) | 4.4% | 💥 Exploit | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access. | |
| Modificada | Alta (7.2) | 0.81% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=delete_product. | |
| Modificada | Alta (7.2) | 0.81% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=. | |
| Modificada | Alta (7.2) | 0.81% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=. | |
| Modificada | Alta (7.2) | 0.73% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manage_user&id=. | |
| Modificada | Alta (7.2) | 0.73% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/manage_category.php?id=. | |
| Modificada | Alta (7.2) | 0.73% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/view_category.php?id=. | |
| Modificada | Alta (7.2) | 0.73% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manage_product&id=. | |
| Modificada | Alta (7.2) | 0.73% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/view_product&id=. | |
| Modificada | Alta (7.2) | 0.73% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=. | |
| Modificada | Alta (7.2) | 0.73% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=product_per_brand&bid=. | |
| Modificada | Alta (7.2) | 0.73% | — | Helmet Store Showroom Site Project Helmet Store Showroom Site | 14/12/2022 | 17/6/2026 | Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=. | |
| Modificada | Alta (8.8) | 0.50% | — | Helmet Store Showroom Project Helmet Store Showroom | 14/12/2022 | 17/6/2026 | Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection. | |
| Modificada | Media (6.1) | 1.3% | 💥 Exploit | Helmet Store Showroom Project Helmet Store Showroom | 14/12/2022 | 17/6/2026 | Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS). |