CVE-2025-0201: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/updateaccount.php. The manipulation of the argument username leads to sql injection. The attack may be...

CVE-2025-0200: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /user/searchnum.php. The manipulation of the argument search leads to sql injection. The attack can...

CVE-2025-0196 code-projects Point of Sales and Inventory Management System plist.php sql injection

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file /user/plist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-0195

CVE-2025-0195 concerns Code Projects’ Point of Sales and Inventory Management System v1.0. The vulnerability is in the file /user/del_product.php, where manipulating the id argument enables SQL injection. The attack is described as executable remotely, and the exploit has been disclosed publicly ...

CVE-2025-0174: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /user/searchresult2.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. I...

CVE-2025-0196: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file /user/plist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-0176: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/addcart.php. The manipulation of the argument id/qty leads to sql injection. The attack may be initiated...

PT-2025-3769

Name of the Vulnerable Software and Affected Versions code-projects Point of Sales and Inventory Management System version 1.0 Description A critical vulnerability has been found in the system, affecting an unknown part of the file /user/plist.php. The manipulation of the cat argument leads to SQ...

CVE-2025-0199: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minuscart.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

CVE-2025-0197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability affects unknown code of the file /user/search.php. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2025-0195: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/delproduct.php. The manipulation of the argument id leads to sql injection. The attack may be launch...

CVE-2023-7075: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /main/checkout.php. The manipulation of the argument pt leads to cross site scripting. The attack may be...