critical9.8
CVE-2022-30387
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.
Impact
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Merchandise Online Store Project | Merchandise Online Store | Version 1.0 |