CVE-2025-0196 code-projects Point of Sales and Inventory Management System plist.php sql injection

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file /user/plist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-0195

CVE-2025-0195 concerns Code Projects’ Point of Sales and Inventory Management System v1.0. The vulnerability is in the file /user/del_product.php, where manipulating the id argument enables SQL injection. The attack is described as executable remotely, and the exploit has been disclosed publicly ...