Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=.

Published May 13, 2022 · Updated Aug 3, 2024 · Assigned by mitre