Shopbeat

shopbeat

6 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Shop Beat Media Player

shop_beat_media_player

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-36250 1Shopbeat 1Shop Beat Media Player Jun 17, 2026 May 30, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery (CSRF).
CVE-2022-36249 1Shopbeat 1Shop Beat Media Player Jun 17, 2026 May 30, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the...Show more Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API level.Show less
CVE-2022-36247 1Shopbeat 1Shop Beat Media Player Jun 17, 2026 May 30, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.
CVE-2022-36246 1Shopbeat 1Shop Beat Media Player Jun 17, 2026 May 30, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.
CVE-2022-36244 1Shopbeat 1Shop Beat Media Player Jun 17, 2026 May 30, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbe...Show more Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za.Show less
CVE-2022-36243 1Shopbeat 1Shop Beat Media Player Jun 17, 2026 May 30, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software o...Show more Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2.57 on arm.Show less