EUVD-2022-37530

Malicious code in bioql PyPI...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

Design/Logic Flaw

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

CVE-2022-34578

CVE-2022-34578 affects Open Source Point of Sale (OSPOS) v3.3.7. Reported as an arbitrary file upload vulnerability via the Update Branding Settings page; root cause not detailed in the provided sources beyond the upload flaw. No explicit exploit in the supplied documents; no patch version or wor...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

Open Source Point of Sale 代码问题漏洞

Open Source Point of Sale is a web-based point of sale system. A security vulnerability exists in Open Source Point of Sale version v3.3.7, which stems from an arbitrary file upload vulnerability discovered via the Update Branding Settings page...

PT-2022-22217 · Unknown · Open Source Point Of Sale

Name of the Vulnerable Software and Affected Versions: Open Source Point of Sale version 3.3.7 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the Update Branding Settings page. Recommendations: For Open Source Point of Sale...

Open Source Point Of Sale Stored XSS

The Open Source Point of Sale POS application running on the remote web server is vulnerable to a Stored XSS vulnerability. - A Stored cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker ca...

Open Source Point Of Sale Default Credentials

The Open Source Point of Sale POS application running on the remote web server uses default credentials for the administrator account. An attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2015-0299

Multiple cross-site scripting XSS vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0299

Multiple cross-site scripting XSS vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0299

CVE-2015-0299 - Open Source Point Of Sale 2.3.1 is linked to a Stored XSS vulnerability reported by multiple sources. The Nessus plugin (OPEN_SOURCE_POS_2_3_3.NASL) explicitly states: the POS web application is vulnerable to a Stored XSS due to improper validation of user-supplied input, which, w...