CVE-2022-40293 Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

The application was vulnerable to a session fixation that could be used hijack accounts...

CVE-2022-40293 Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

The application was vulnerable to a session fixation that could be used hijack accounts...

CVE-2022-40293

CVE-2022-40293 pertains to a session-fixation vulnerability in PHP Point of Sale, LLC’s PHP Point of Sale 19.0. The issue arises in the application’s session management, enabling an attacker to hijack user accounts. CVSS metrics indicate a CRITICAL impact (CVSS 3.1: 9.8) with high confidentiality...