← Back to CVEs
CVE-2022-46071
CRITICAL9.8
Description
There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access.
CVE Details
CVSS v3.1 Score9.8
SeverityCRITICAL
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published12/14/2022
Last Modified4/22/2025
Sourcenvd
Honeypot Sightings0
Affected Products
helmet_store_showroom_site_project:helmet_store_showroom_site
Weaknesses (CWE)
CWE-89CWE-89
References
https://www.youtube.com/watch?v=5wit1Arzwxs&feature=youtu.be(cve@mitre.org)
https://yuyudhn.github.io/CVE-2022-46071/(cve@mitre.org)
https://www.youtube.com/watch?v=5wit1Arzwxs&feature=youtu.be(af854a3a-2127-422b-91ae-364da2661108)
https://yuyudhn.github.io/CVE-2022-46071/(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.