Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior
Críticas / altas1299▼ 202 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
21 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.92% | — | Merchandise Online Store Project Merchandise Online Store | 17/10/2022 | 17/6/2026 | A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account. | |
| Modificada | Alta (8.8) | 0.89% | — | Merchandise Online Store Project Merchandise Online Store | 11/10/2022 | 17/6/2026 | A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard. | |
| Modificada | Media (5.4) | 0.43% | — | Merchandise Online Store Project Merchandise Online Store | 11/10/2022 | 17/6/2026 | A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form. | |
| Modificada | Crítica (9.8) | 1.8% | — | Merchandise Online Store Project Merchandise Online Store | 2/6/2022 | 17/6/2026 | Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information. | |
| Modificada | Crítica (9.8) | 1.1% | — | Merchandise Online Store Project Merchandise Online Store | 24/5/2022 | 17/6/2026 | Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product. | |
| Modificada | Alta (7.2) | 0.97% | — | Merchandise Online Store Product Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=products&c=. | |
| Modificada | Alta (7.2) | 0.97% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=. | |
| Modificada | Alta (7.2) | 0.97% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=. | |
| Modificada | Alta (7.2) | 0.97% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=. | |
| Modificada | Alta (7.2) | 0.97% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=. | |
| Modificada | Alta (7.2) | 0.97% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=. | |
| Modificada | Alta (7.2) | 0.97% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart. | |
| Modificada | Alta (7.2) | 0.97% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category. | |
| Modificada | Crítica (9.8) | 1.1% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category. | |
| Modificada | Crítica (9.8) | 0.94% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order. | |
| Modificada | Crítica (9.8) | 1.1% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured. | |
| Modificada | Crítica (9.8) | 1.1% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order. | |
| Modificada | Crítica (9.8) | 1.1% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory. | |
| Modificada | Media (6.5) | 0.94% | — | Merchandise Online Store Project Merchandise Online Store | 13/5/2022 | 17/6/2026 | Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img. |