Lucene search
+L

48 matches found

CNNVD
CNNVD
added 2023/06/23 12:0 a.m.4 views

POS Codekop 安全漏洞

POS Codekop is an application. A security vulnerability exists in POS Codekop version 2.0 that stems from the presence of a remote code execution RCE vulnerability...

8.8CVSS8.7AI score0.06366EPSS
SaveExploits4References8
CVE
CVE
added 2023/06/23 12:0 a.m.49 views

CVE-2023-36348

POS Codekop v2.0 contains an authenticated remote code execution (RCE) vulnerability stemming from insufficient sanitization of the filename parameter in the edit flow (/upload path). Specifically, the flaw allows an authenticated attacker to upload a PHP file via the filename field and access it...

8.8CVSS9AI score0.06366EPSS
SaveExploits4References3Affected Software1
EUVD
EUVD
added 2023/06/23 12:0 a.m.7 views

EUVD-2023-40314

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

6.1CVSS6AI score0.05295EPSS
SaveExploits4References3
Cvelist
Cvelist
added 2023/06/23 12:0 a.m.51 views

CVE-2023-36348

POS Codekop v2.0 was discovered to contain an authenticated remote code execution RCE vulnerability via the filename parameter...

9.3AI score0.06366EPSS
SaveExploits4References3
Positive Technologies
Positive Technologies
added 2023/06/23 12:0 a.m.5 views

PT-2023-25545 · Unknown · Pos Codekop

Name of the Vulnerable Software and Affected Versions: POS Codekop version 2.0 Description: The issue is related to an authenticated remote code execution RCE vulnerability. It can be exploited via the filename parameter. Recommendations: For POS Codekop version 2.0, consider restricting access t...

8.8CVSS8.7AI score0.06366EPSS
SaveExploits4References9
Vulnrichment
Vulnrichment
added 2023/06/23 12:0 a.m.8 views

CVE-2023-36345

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

7.5AI score0.01049EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/06/23 12:0 a.m.5 views

POS Codekop 跨站脚本漏洞

POS Codekop is an application. A security vulnerability exists in POS Codekop version 2.0, which stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit the vulnerability to elevate privileges...

8.8CVSS7.8AI score0.01049EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/06/23 12:0 a.m.34 views

CVE-2023-36345

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

9.1AI score0.01049EPSS
SaveExploits1References2
Rows per page
Query Builder