CVE-2018-18805

CVE-2018-18805 affects Point Of Sales 1.0 (VB.Net, MySQL) where the login form (LoginForm1.vb) builds a SQL query by string concatenation, enabling SQL injection. Public PoCs and exploits (Exploit DB, PacketStorm) demonstrate attacker can retrieve/modify backend data via the login screen. Connect...

coolshot-sql.txt

Aria-Security Team http://aria-security.net ------------------------------------- CoolShot E-Lite POS 1.0 http://coolshot.net/index.php/works/49-e-lite-pos Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108post1108 Published on November 24 2007 users.userid users.username...