Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2022-34768
Disclosure Date: August 03, 2022 (last updated February 24, 2025)
insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.
0
Attacker Value
Unknown
CVE-2022-30628
Disclosure Date: July 21, 2022 (last updated October 07, 2023)
It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL https://XXXX.supersmart.me/services/v4/invoiceImg?orderId=XXXXX
0
