Lucene search
+L

1313 matches found

Positive Technologies
Positive Technologies
β€’added 2026/02/02 12:00 a.m.β€’48 views

PT-2026-6302

Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.28.5.0 Description CI4MS is a CodeIgniter 4-based CMS skeleton that provides a production-ready, modular architecture with RBAC authorization and theme support. An authenticated user with file editor permissions can...

9.9CVSS6.5AI score0.00907EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2026/01/13 12:00 a.m.β€’7 views

CVE-2025-68658: Improper Neutralization of Input During Web Page Generation

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. opensourcepos 3.4.0 and 3.4.1 has a stored XSS vulnerability exists in the Configuration Information functionality. An authenticated user with the permission β€œConfiguration...

4.8CVSS5.9AI score0.00219EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
β€’added 2026/01/09 9:11 a.m.β€’24 views

CVE-2022-35943

Shield is an authentication and authorization framework for CodeIgniter 4. This vulnerability may allow SameSite Attackers to bypass the CodeIgniter4 CSRF protection mechanism with CodeIgniter Shield. For this attack to succeed, the attacker must have direct or indirect, e.g., XSS control over a...

8.8CVSS7.8AI score0.00611EPSS
SaveExploits1References1
NVD
NVD
β€’added 2025/12/17 11:16 p.m.β€’27 views

CVE-2025-68434

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery CSRF vulnerability exists in the application's filter configuration. The CSRF protection...

8.8CVSS0.00281EPSS
SaveExploits4References4
Mend
Mend
β€’added 2025/12/17 10:20 p.m.β€’7 views

CVE-2025-68434

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery CSRF vulnerability exists in the application's filter configuration. The CSRF protection...

8.8CVSS5.9AI score0.00281EPSS
SaveExploits4References6
Mend
Mend
β€’added 2025/12/17 10:16 p.m.β€’6 views

CVE-2025-68147

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Stored Cross-Site Scripting XSS vulnerability exists in the "Return Policy" configuration field. The application doe...

9.2CVSS5.8AI score0.00376EPSS
SaveExploits4References5
Cvelist
Cvelist
β€’added 2025/12/17 10:16 p.m.β€’53 views

CVE-2025-68147 opensourcepos has a Cross-site Scripting vulnerability

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Stored Cross-Site Scripting XSS vulnerability exists in the "Return Policy" configuration field. The application doe...

8.1CVSS0.00376EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/12/17 12:00 a.m.β€’4 views

CVE-2025-68147: Improper Neutralization of Input During Web Page Generation

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Stored Cross-Site Scripting XSS vulnerability exists in the "Return Policy" configuration field. The application doe...

8.1CVSS5.8AI score0.00376EPSS
SaveExploits4References7
Packet Storm
Packet Storm
β€’added 2025/11/28 12:00 a.m.β€’343 views

πŸ“„ CodeIgniter CMS 4.2.0 SQL Injection

Proof of concept exploit for the CodeIgniter CMS version 4.2.0 remote SQL injection vulnerability. ============================================================================================================================================= | Title : CodeIgniter CMS 4.2.0 SQL Injection Exploit | ...

8.2AI score
SaveExploits0
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’19 views

EUVD-2007-3693

Malware in sbrugna...

5CVSS6.4AI score0.01186EPSS
SaveExploits0References5
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’21 views

EUVD-2020-17783

Malware in sbrugna...

6.1CVSS6.3AI score0.00679EPSS
SaveExploits0References2
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’22 views

EUVD-2011-3677

Malware in sbrugna...

5CVSS5.8AI score0.01335EPSS
SaveExploits1References4
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’15 views

EUVD-2007-3691

Malware in sbrugna...

5CVSS6.4AI score0.01706EPSS
SaveExploits0References7
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’22 views

EUVD-2007-3692

Malware in sbrugna...

4.3CVSS6.4AI score0.01223EPSS
SaveExploits0References7
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’17 views

EUVD-2018-10145

Malware in sbrugna...

4.8CVSS5.4AI score0.01652EPSS
SaveExploits6References4
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’17 views

EUVD-2020-17778

Malware in sbrugna...

6.1CVSS6.3AI score0.00679EPSS
SaveExploits0References2
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’14 views

EUVD-2020-17779

Malware in sbrugna...

6.1CVSS6.3AI score0.00679EPSS
SaveExploits0References2
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’16 views

EUVD-2020-17781

Malware in sbrugna...

6.1CVSS6.3AI score0.00679EPSS
SaveExploits0References2
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’20 views

EUVD-2020-17780

Malware in sbrugna...

6.1CVSS6.3AI score0.00679EPSS
SaveExploits0References2
EUVD
EUVD
β€’added 2025/10/07 12:30 a.m.β€’25 views

EUVD-2020-17782

Malware in sbrugna...

6.1CVSS6.3AI score0.00679EPSS
SaveExploits0References2
Rows per page
Query Builder