← Database

CVE-2022-42237

CRITICAL CVSS: 9.8 Published: 2022-10-17 Modified: 2026-06-17

Description

A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.

Affected Platforms

Merchandise Online Store Project Merchandise Online Store

Weakness Type

CWE-89, CWE-89

References