CVE-2018-18805

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...

Sql injection

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...

CVE-2018-18805

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...

CVE-2018-18805

CVE-2018-18805 affects Point Of Sales 1.0 (VB.Net, MySQL) where the login form (LoginForm1.vb) builds a SQL query by string concatenation, enabling SQL injection. Public PoCs and exploits (Exploit DB, PacketStorm) demonstrate attacker can retrieve/modify backend data via the login screen. Connect...

PT-2018-14666

Name of the Vulnerable Software and Affected Versions Point Of Sales version 1.0 Description The issue allows SQL injection via the login screen, related to LoginForm1.vb. Recommendations For version 1.0, consider restricting access to the login screen until a patch is available. As a temporary...

CVE-2018-18805: Improper Neutralization of Special Elements used in an SQL Command

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...

Point of Sales (POS) in VB.Net MySQL Database 1.0 - SQL Injection

Point of Sales POS in VB.Net MySQL Database 1.0 - SQL Injection Exploit Title: Point of Sales POS in VB.Net MySQL Database 1.0 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...