Approved changes feed: RSS · Atom
cpe:2.3:a:shop_beat:studio:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Shop Beat (a5c4ca5e-232e-5a3d-9b08-060e3d6eb06c) |
|---|---|
| Product | Studio (a4a3a1b6-8e61-5dc1-ba69-eceb66725623) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-36250 |
vulnerable | 2026-06-08 05:46:06.477025 |
Cross Site Request Forgery on Shop Beat Services
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery (CSRF).
Published: 2023-05-30T00:00:00.000Z
Updated: 2025-01-13T20:50:36.099Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36249 |
vulnerable | 2026-06-08 05:46:06.476720 |
Shop Beat Services Vulnerable To Bypass 2FA via APIs
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API level.
Published: 2023-05-30T00:00:00.000Z
Updated: 2025-01-13T20:51:29.627Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36247 |
vulnerable | 2026-06-08 05:46:06.476407 |
Shop Beat Services Vulnerable To IDOR
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.
Published: 2023-05-30T00:00:00.000Z
Updated: 2025-01-13T20:53:20.516Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36246 |
vulnerable | 2026-06-08 05:46:06.476083 |
Shop Beat Services Vulnerable To Insecure Permissions
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.
Published: 2023-05-30T00:00:00.000Z
Updated: 2025-01-13T20:54:08.746Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36244 |
vulnerable | 2026-06-08 05:46:06.475641 |
Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za.
Published: 2023-05-30T00:00:00.000Z
Updated: 2025-01-13T20:55:19.155Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36243 |
vulnerable | 2026-06-08 05:46:06.473892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.