CVE-2023-36346

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

CVE-2023-36345

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

Cross site scripting

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

CVE-2023-36346

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

PT-2023-25543 · Unknown · Pos Codekop

Name of the Vulnerable Software and Affected Versions: POS Codekop version 2.0 Description: A reflected cross-site scripting XSS issue was found in POS Codekop. The issue is related to the nm member parameter at the "print.php" endpoint. This allows for potential XSS attacks. Recommendations: For...

CVE-2023-36345

POS Codekop v2.0 is affected by a CSRF vulnerability that can allow privilege escalation. The root cause is a Cross-Site Request Forgery issue, with no public details about a fix in the provided sources. The PT-2023-25542 entry recommends CSRF token validation and restricting sensitive operations...

CVE-2023-36346

POS Codekop v2.0 has a reflected XSS vulnerability in the print.php endpoint through the nm_member parameter. Affects the web application’s print.php handling, enabling injection of script code that could be executed in users’ browsers. The Nuclei template and Red Hat/NVD references confirm the i...

CVE-2023-36348: Missing Authorization

POS Codekop v2.0 was discovered to contain an authenticated remote code execution RCE vulnerability via the filename parameter...

PT-2023-25542 · Unknown · Pos Codekop

Name of the Vulnerable Software and Affected Versions: POS Codekop version 2.0 Description: A Cross-Site Request Forgery CSRF issue allows attackers to escalate privileges. Recommendations: For POS Codekop version 2.0, consider implementing proper CSRF token validation to prevent unauthorized...

POS Codekop 安全漏洞

POS Codekop is an application. A security vulnerability exists in POS Codekop version 2.0 that stems from the presence of a remote code execution RCE vulnerability...

CVE-2023-36348

POS Codekop v2.0 contains an authenticated remote code execution (RCE) vulnerability stemming from insufficient sanitization of the filename parameter in the edit flow (/upload path). Specifically, the flaw allows an authenticated attacker to upload a PHP file via the filename field and access it...

CVE-2023-36345

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

PT-2023-25545 · Unknown · Pos Codekop

Name of the Vulnerable Software and Affected Versions: POS Codekop version 2.0 Description: The issue is related to an authenticated remote code execution RCE vulnerability. It can be exploited via the filename parameter. Recommendations: For POS Codekop version 2.0, consider restricting access t...

CVE-2023-36345

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

CVE-2023-36346: Improper Neutralization of Input During Web Page Generation

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

CVE-2023-36345: Improper Neutralization of Input During Web Page Generation

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

Campcodes Coffee Shop POS System SQL Injection Vulnerability (CNVD-2023-38606)

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from a lack of validation of the parameter id of the file manageuser.php against externally-entered SQL statements, which can ...

Campcodes Coffee Shop POS System SQL Injection Vulnerability (CNVD-2023-38605)

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of validation of the parameter id of the file managesale.php against external SQL input, which can be exploited ...

Campcodes Coffee Shop POS System SQL Injection Vulnerability (CNVD-2023-38610)

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. A SQL injection vulnerability exists in Campcodes Coffee Shop POS System version 1.0, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...