CVE-2023-27203: Improper Neutralization of Special Elements used in an SQL Command

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...

CVE-2023-27203

CVE-2023-27203 affects Best POS Management System 1.0, with a SQL injection flaw exploitable through the id parameter in /billing/home.php. The issue allows an attacker to cause high-severity impact on confidentiality, integrity, and availability (CVSS 3.1: 9.8, Network, Low attack complexity, No...

CVE-2023-27203

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...

CVE-2023-27205: Improper Neutralization of Special Elements used in an SQL Command

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/salesreport.php...

CVE-2023-27202

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php...

CVE-2023-27205

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/salesreport.php...

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Personal developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability via the id parameter in /kruxton/manageuser.php...

CVE-2023-27203

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A security vulnerability exists in Best POS Management System version 1.0, which stems from a SQL injection vulnerability via the id parameter in /billing/home.php...

CVE-2023-27205

CVE-2023-27205 affects Best POS Management System 1.0. A SQL injection vulnerability exists in the /kruxton/sales_report.php endpoint, exploitable via the month parameter. The linked data indicate a high-severity issue (CVSS v3.1: 9.8, Network attack vector, no privileges required, no user intera...

CVE-2023-27202

CVE-2023-27202 affects Best POS Management System 1.0. The vulnerability is a SQL injection in the /kruxton/receipt.php endpoint, exploitable via the id parameter. According to the CVSS/metrics in the records, it yields a CRITICAL impact with high confidentiality, integrity, and availability risk...

CVE-2023-27202: Improper Neutralization of Special Elements used in an SQL Command

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php...

CVE-2023-27204

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

CVE-2023-27206: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

Best POS Management System 跨站脚本漏洞

Best pos management system is a best pos management system by Mayuri K. Personal developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a cross-site scripting XSS vulnerability in /kruxton/navbar.php, which can be exploited by an attacker to...

PT-2023-21004 · Unknown · Best Pos Management System

Name of the Vulnerable Software and Affected Versions: Best POS Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the month parameter at the "/kruxton/sales report.php" API endpoint. Recommendations: For Best...

CVE-2023-27205

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/salesreport.php...

CVE-2023-27202

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php...

CVE-2023-27204

CVE-2023-27204 affects Best POS Management System 1.0. A SQL injection vulnerability exists via the id parameter at /kruxton/manage_user.php, enabling potential unauthorized data access with network vector, no authentication required, and high impact (C, I, A: HIGH). No concrete patches or fixes ...

CVE-2023-27206

CVE-2023-27206 affects Best POS Management System v1.0, with an XSS flaw in /kruxton/navbar.php exploitable via a crafted payload in the page parameter. The vulnerability stems from improper handling of user-controllable input, enabling execution of arbitrary web scripts/HTML in the context of th...