Vulnerabilities > Superstorefinder > Super Store Finder > 1.2.2

DATE CVE VULNERABILITY TITLE RISK
2023-10-02 CVE-2023-43835 Injection vulnerability in Superstorefinder Super Store Finder
Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content.
network
low complexity
superstorefinder CWE-74
8.8
2023-09-27 CVE-2023-44044 SQL Injection vulnerability in Superstorefinder Super Store Finder
Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php.
network
low complexity
superstorefinder CWE-89
7.2