CVE-2022-40292 Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each account within the system...

CVE-2022-40292

CVE-2022-40292 affects PHP Point of Sale 19.0 by PHP Point of Sale, LLC. The vulnerability enables unauthenticated user enumeration by querying an unsecured endpoint to retrieve information about accounts, constituting an information disclosure issue. The NVD entry and related records describe th...