Lucene search
+L

20 matches found

Kitploit
Kitploit
•added 2026/10/10 4:59 p.m.•17 views

CVE-2022-3949

CVE-2022-3949 XSS in Simple Cashiering System Simple Cashiering System is vulnerable to Cross Site Scripting XSS - a malicious actor can change the fullname of a compromised user to a XSS Payload and whenever a admin visits the user-tab or the sales tab and looks into sales made by the malicious...

6.1CVSS6.7AI score0.00517EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/09 11:35 a.m.•21 views

CVE-2021-41492

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

9.8CVSS8.2AI score0.01693EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2021-28518

Malicious code in bioql PyPI...

9.8CVSS7AI score0.01693EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2022-43283

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00517EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:22 p.m.•21 views

CVE-2022-3949

A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated...

6.1CVSS6.3AI score0.00517EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/11 1:15 p.m.•30 views

CVE-2022-3949

A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated...

6.1CVSS0.00517EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/11/11 12:00 a.m.•18 views

Simple Cashiering System 跨站脚本漏洞

Simple Cashiering System is a simple open source cashiering system by Carlo Montero personal developer. It is used to help businesses manage their daily transactions. A security vulnerability exists in Simple Cashiering System, which stems from some unknown handling of the user account handler, a...

6.1CVSS5.8AI score0.00517EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/11 12:00 a.m.•64 views

CVE-2022-3949

CVE-2022-3949 affects Sourcecodester Simple Cashiering System, specifically the User Account Handler where manipulating the fullname parameter triggers cross-site scripting (XSS). Reported to permit remote initiation, with no documented exploit details in the provided sources. The impact is descr...

6.1CVSS4.8AI score0.00517EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/11 12:00 a.m.•12 views

CVE-2022-3949 Sourcecodester Simple Cashiering System User Account cross site scripting

A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated...

3.5CVSS4.2AI score0.00517EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/11 12:00 a.m.•4 views

CVE-2022-3949: Improper Neutralization

A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated...

6.1CVSS4AI score0.00517EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/11/11 12:00 a.m.•41 views

CVE-2022-3949 Sourcecodester Simple Cashiering System User Account cross site scripting

A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated...

3.5CVSS6.2AI score0.00517EPSS
SaveExploits0References1
OSV
OSV
•added 2021/11/03 8:15 p.m.•18 views

CVE-2021-41492

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

9.8CVSS8.3AI score0.01693EPSS
SaveExploits1References3
NVD
NVD
•added 2021/11/03 8:15 p.m.•24 views

CVE-2021-41492

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

9.8CVSS0.01693EPSS
SaveExploits1References3
Prion
Prion
•added 2021/11/03 8:15 p.m.•24 views

Sql injection

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

7.5CVSS10AI score0.01693EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2021/11/03 8:15 p.m.•11 views

CVE-2021-41492

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

9.8CVSS8.3AI score0.01693EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/11/03 7:11 p.m.•39 views

CVE-2021-41492

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

10AI score0.01693EPSS
SaveExploits1References3
CVE
CVE
•added 2021/11/03 7:11 p.m.•69 views

CVE-2021-41492

Concretely, CVE-2021-41492 affects Sourcecodester Simple Cashiering System (POS) v1.0. It has SQL injection vulnerabilities in three vectors: (1) Product Code on the POS page, (2) the id parameter in manage_products, and (3) the t parameter in actions.php. The root cause is lack of input filterin...

9.8CVSS8.3AI score0.01693EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/11/03 12:00 a.m.•3 views

PT-2021-23310

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Cashiering System POS version 1.0 Description Multiple SQL Injection issues exist in the system. These issues are found in three areas: 1 the Product Code in the pos page in cashiering, 2 the id parameter in manage...

9.8CVSS0.01693EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/03 12:00 a.m.•5 views

CVE-2021-41492: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

9.8CVSS8.3AI score0.01693EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/03/02 12:00 a.m.•4 views

Logic Flaw Vulnerability in Jinwei Supermarket Cashiering System

Jinwei Supermarket Cashiering System is a code-sweeping cashiering tool designed for small and medium-sized supermarkets and community convenience stores. There is a logic flaw vulnerability in Jinwei Supermarket Cashier System, which can be exploited by attackers to obtain sensitive information...

6.7AI score
SaveExploits0
Rows per page
Query Builder