Campcodes Coffee Shop POS System SQL Injection Vulnerability (CNVD-2023-38606)

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from a lack of validation of the parameter id of the file manageuser.php against externally-entered SQL statements, which can ...

CVE-2023-2216

A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. Th...

Cross site scripting

A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. Th...

CVE-2023-2216

CVE-2023-2216 affects Campcodes Coffee Shop POS System v1.0. The vulnerability is in an unknown functionality of /classes/Users.php where manipulating the firstname parameter triggers cross-site scripting. Attacks can be launched remotely and the exploit has been publicly disclosed. No patch/vers...

CVE-2023-2213

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/products/manageproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2023-2213

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/products/manageproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2023-2212

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/products/viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2023-2214

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/sales/managesale.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has...

Sql injection

A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

Sql injection

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/products/viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2023-2215 Campcodes Coffee Shop POS System manage_user.php sql injection

A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-2215

The CVE-2023-2215 entry covers Campcodes Coffee Shop POS System v1.0. Affected is an unknown function in /admin/user/manage_user.php where manipulation of the id parameter enables SQL injection. The vulnerability enables remote exploitation, and public disclosure of the exploit is noted. Connecte...

CVE-2023-2214 Campcodes Coffee Shop POS System manage_sale.php sql injection

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/sales/managesale.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2023-2214

CVE-2023-2214 affects Campcodes Coffee Shop POS System v1.0. The vulnerability is an SQL injection in the /admin/sales/manage_sale.php file caused by unsafely handling the id parameter. It can be triggered remotely; exploits have been disclosed publicly (VDB-226979). Reports from multiple sources...

CVE-2023-2213

CVE-2023-2213 affects Campcodes Coffee Shop POS System v1.0. The vulnerability is a SQL injection in the file /admin/products/manage_product.php caused by unsafely handling the id parameter, enabling remote exploitation. Multiple connected sources confirm the issue and the exploitation is public....

CVE-2023-2213 Campcodes Coffee Shop POS System manage_product.php sql injection

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/products/manageproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2023-2212 Campcodes Coffee Shop POS System view_product.php sql injection

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/products/viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2023-2212 Campcodes Coffee Shop POS System view_product.php sql injection

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/products/viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2023-2212

CVE-2023-2212 affects Campcodes Coffee Shop POS System v1.0. The SQL injection vulnerability stems from unsafely handling the id parameter in /admin/products/view_product.php, enabling remote exploitation. Multiple connected sources confirm the issue and public disclosure, with no provided patch/...

CVE-2023-2211

A vulnerability was found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...