CVE-2023-27203

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A security vulnerability exists in Best POS Management System version 1.0, which stems from a SQL injection vulnerability via the id parameter in /billing/home.php...

CVE-2023-27202

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php...

CVE-2023-27202

CVE-2023-27202 affects Best POS Management System 1.0. The vulnerability is a SQL injection in the /kruxton/receipt.php endpoint, exploitable via the id parameter. According to the CVSS/metrics in the records, it yields a CRITICAL impact with high confidentiality, integrity, and availability risk...

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Personal developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability via the id parameter in /kruxton/manageuser.php...

CVE-2023-27206

CVE-2023-27206 affects Best POS Management System v1.0, with an XSS flaw in /kruxton/navbar.php exploitable via a crafted payload in the page parameter. The vulnerability stems from improper handling of user-controllable input, enabling execution of arbitrary web scripts/HTML in the context of th...

CVE-2023-27205

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/salesreport.php...

Best POS Management System 跨站脚本漏洞

Best pos management system is a best pos management system by Mayuri K. Personal developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a cross-site scripting XSS vulnerability in /kruxton/navbar.php, which can be exploited by an attacker to...

CVE-2023-27202

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php...

PT-2023-21004 · Unknown · Best Pos Management System

Name of the Vulnerable Software and Affected Versions: Best POS Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the month parameter at the "/kruxton/sales report.php" API endpoint. Recommendations: For Best...

CVE-2023-27204

CVE-2023-27204 affects Best POS Management System 1.0. A SQL injection vulnerability exists via the id parameter at /kruxton/manage_user.php, enabling potential unauthorized data access with network vector, no authentication required, and high impact (C, I, A: HIGH). No concrete patches or fixes ...

CVE-2023-0946

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotel...

CVE-2023-0945

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input " leads to cross site scripting. It is possible to launch...

Sql injection

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotel...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input " leads to cross site scripting. It is possible to launch...

CVE-2023-0943

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function savesettings of the file index.php?page=sitesettings of the component Image Handler. The manipulation of the argument img with the input...

CVE-2023-0943

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function savesettings of the file index.php?page=sitesettings of the component Image Handler. The manipulation of the argument img with the input...

Out-of-bounds

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function savesettings of the file index.php?page=sitesettings of the component Image Handler. The manipulation of the argument img with the input...

CVE-2023-0946

The CVE-2023-0946 entry affects SourceCodester Best POS Management System 1.0, specifically the billing/index.php?id=9 parameter. The root cause is input manipulation that enables SQL injection, enabling remote exploitation with impact on confidentiality, integrity, and availability reported as h...

CVE-2023-0946 SourceCodester Best POS Management System sql injection

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotel...