CVE-2023-0946 SourceCodester Best POS Management System sql injection

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotel...

CVE-2023-0945 SourceCodester Best POS Management System cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input " leads to cross site scripting. It is possible to launch...

CVE-2023-0945

SourceCodester Best POS Management System 1.0 contains an XSS vulnerability in the endpoint index.php?page=add-category. The Name parameter can be manipulated with a payload like > to trigger cross-site scripting. The issue affects the specific function handling the add-category page and can b...

CVE-2023-0943

CVE-2023-0943 affects SourceCodester Best POS Management System v1.0, specifically the Image Handler’s save_settings function (index.php?page=site_settings). The vulnerability arises from unsafely handling the img argument (input ../../shell.php), enabling unrestricted file upload and potential r...

Best pos management system SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which originates from the presence of an unknown function in the file billing/index.php?id=9, which can be exploited by an...

Best POS Management System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Stored Cross Site Scripting on Best pos Management System Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Software Link: https://www.sourcecodester.com/sites/default/files/download/mayurik/kruxton.zi...

Best POS Management System 1.0 Cross Site Scripting

Exploit Title: Stored Cross Site Scripting on Best pos Management System Google Dork: NA Date: 14/2/2023 Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Software Link:...

Best POS Management System 1.0 Shell Upload

Exploit Title: Authenticated Remote Code Execution on File Upload Google Dork: NA Date: 17/2/2023 Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Software Link:...