<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Shop Beat Solutions (Pty) LTD — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/shopbeat" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Shop Beat Solutions (Pty) LTD (shopbeat).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/shopbeat.png</url>
      <title>Shop Beat Solutions (Pty) LTD — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2022-36250 · 8.8 HIGH 🌩️ — Cross Site Request Forgery on Shop Beat Services</title>
      <link>https://vulnogram.org/CVE-2022-36250</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-36250</guid>
      <description>Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery (CSRF).</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 May 2023 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-36249 · 5.4 MEDIUM — Shop Beat Services Vulnerable To Bypass 2FA via APIs</title>
      <link>https://vulnogram.org/CVE-2022-36249</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-36249</guid>
      <description>Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. &quot;After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the…</description>
      <category>Medium</category>
      <pubDate>Tue, 30 May 2023 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-36247 · 9.1 CRITICAL 🌩️ — Shop Beat Services Vulnerable To IDOR</title>
      <link>https://vulnogram.org/CVE-2022-36247</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-36247</guid>
      <description>Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 May 2023 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-36246 · 9.8 CRITICAL 🌩️ — Shop Beat Services Vulnerable To Insecure Permissions</title>
      <link>https://vulnogram.org/CVE-2022-36246</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-36246</guid>
      <description>Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 May 2023 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-36244 · 5.4 MEDIUM — Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services</title>
      <link>https://vulnogram.org/CVE-2022-36244</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-36244</guid>
      <description>Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za.</description>
      <category>Medium</category>
      <pubDate>Tue, 30 May 2023 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-36243 · 5.3 MEDIUM 🌩️ — Directory Traversal on Shop Beat Services</title>
      <link>https://vulnogram.org/CVE-2022-36243</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-36243</guid>
      <description>Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in &quot;studio&quot; software of Shop Beat. This issue affect…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 May 2023 00:00:00 GMT</pubDate>
    </item>
  </channel>
</rss>
