CVE-2025-10026 itsourcecode POS Point of Sale System -complex_header.php cross site scripting

A vulnerability was found in itsourcecode POS Point of Sale System 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/-complexheader.php. The manipulation of the argument scripts results in cross site scripting. It ...

CVE-2025-9921

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument productcode/genname/productname/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has be...

itsourcecode POS Point of Sale System 代码注入漏洞

POS Point of Sale System is a pos point of sale system. POS Point of Sale System suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the scripts parameter of the...

PT-2025-36334

Name of the Vulnerable Software and Affected Versions: itsourcecode POS Point of Sale System version 1.0 Description: A cross site scripting issue exists due to the manipulation of the scripts argument. This can be initiated remotely and affects some unknown functionality of the file...

PT-2025-36325

Name of the Vulnerable Software and Affected Versions: itsourcecode POS Point of Sale System version 1.0 Description: A cross site scripting issue exists in itsourcecode POS Point of Sale System version 1.0. The vulnerability is located in an unknown functionality of the file...

CVE-2025-9794

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/postransac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The explo...

CVE-2025-9921

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument productcode/genname/productname/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has be...

CVE-2025-9921

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument productcode/genname/productname/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has be...

CVE-2025-9921

CVE-2025-9921 affects Code-projects POS Pharmacy System 1.0. The vulnerability is a cross-site scripting (XSS) flaw in an unknown function of the file /main/products.php, triggered by manipulating one or more arguments—product_code, gen_name, product_name, or supplier. The issue can be exploited ...

CVE-2025-9921 code-projects POS Pharmacy System products.php cross site scripting

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument productcode/genname/productname/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has be...

CVE-2025-9921 code-projects POS Pharmacy System products.php cross site scripting

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument productcode/genname/productname/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has be...

CVE-2025-9794

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/postransac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The explo...

CVE-2025-9794 Campcodes Computer Sales and Inventory System pos_transac.php sql injection

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/postransac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The explo...

CVE-2025-9794

CVE-2025-9794 affects Campcodes Computer Sales and Inventory System 1.0. A SQL injection vulnerability exists in the /pages/pos_transac.php?action=add endpoint, exploitable by manipulating the cash/firstname parameter. Attacks may be performed remotely, and multiple parameters could be affected. ...

PT-2025-35510

Name of the Vulnerable Software and Affected Versions: Campcodes Computer Sales and Inventory System version 1.0 Description: A flaw exists in Campcodes Computer Sales and Inventory System that may allow for SQL injection. The issue is located in an unknown function within the /pages/pos...

MAL-2025-13224 Malicious code in @zalastax/nolb-pos_ (npm)

The package @zalastax/nolb-pos was found to contain malicious code...

Malicious code in @zalastax/nolb-pos (npm)

The package @zalastax/nolb-pos was found to contain malicious code...

MAL-2025-13222 Malicious code in @zalastax/nolb-pos- (npm)

The package @zalastax/nolb-pos- was found to contain malicious code...

Malicious code in @zalastax/nolb-pos- (npm)

The package @zalastax/nolb-pos- was found to contain malicious code...

Malicious code in @zalastax/nolb-pos_ (npm)

The package @zalastax/nolb-pos was found to contain malicious code...