28 matches found
CVE-2022-43085
An arbitrary file upload vulnerability in addproduct.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-43085
CVE-2022-43085 affects Restaurant POS System v1.0, specifically the add_product.php file. The vulnerability is an arbitrary file upload that lets an attacker execute arbitrary PHP code by uploading a crafted file. According to multiple sources, this can lead to remote code execution with likely h...
PT-2022-26748 · Unknown · Restaurant Pos System
Name of the Vulnerable Software and Affected Versions: Restaurant POS System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the update customer.php file. Recommendations: For Restaurant POS System version 1.0, consider restricting access to the update...
CVE-2022-43086
Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via updatecustomer.php...
CVE-2022-43085: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in addproduct.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-43086
Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via updatecustomer.php...
CVE-2022-43086: Improper Neutralization of Special Elements used in an SQL Command
Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via updatecustomer.php...
CVE-2022-43086
CVE-2022-43086 affects Restaurant POS System v1.0. A SQL injection vulnerability exists in the file update_customer.php, allowing attacker-controlled input to influence SQL queries. Reported impact highlights high confidentiality impact with no integrity or availability impact per the provided me...