Lucene search
+L

5 matches found

OSV
OSV
•added 2026/01/20 6:16 p.m.•14 views

CVE-2025-67261

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits2References2
NVD
NVD
•added 2026/01/20 6:16 p.m.•15 views

CVE-2025-67261

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

6.5CVSS0.00209EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2026/01/20 12:00 a.m.•30 views

PT-2026-3640

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting XSS vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these...

6.1CVSS5.2AI score0.00196EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•1 views

CVE-2025-67261: Improper Neutralization of Special Elements used in an SQL Command

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

6.5CVSS6AI score0.00209EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•1 views

CVE-2025-67263: Improper Neutralization of Input During Web Page Generation

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting XSS vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these...

6.1CVSS5.7AI score0.00196EPSS
SaveExploits2References1
Rows per page
Query Builder