1050 matches found
CVE-2023-3617
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
CVE-2023-3617
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
Sql injection
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
CVE-2023-3617
CVE-2023-3617 affects SourceCodester Best POS Management System 1.0, specifically the Login Page component’s admin_class.php. Multiple sources describe a SQL injection vulnerability triggered by manipulating the username parameter, exploitable remotely, with public disclosure. Connected documents...
CVE-2023-3617 SourceCodester Best POS Management System Login Page admin_class.php sql injection
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
PT-2023-25470 · Unknown · Sourcecodester Best Pos Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A critical issue affects the Login Page component, specifically the file admin class.php. The manipulation of the username argument leads to SQL injection. This issue can be...
Qatanna POS Software 1.0 Blind SQL Injection
Exploit Title: Qatanna POS Software 1.0 - Blind SQL Injection Exploit Date: May 07, 2023. CVSS 3.1: 8.8 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Application Name: Qatanna POS Software Application Version: 1.0 Link: https://www.codester.com/items/42053/qatanna-pos-software...
Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS)
Exploit Title: Sales of Cashier Goods v1.0 - Cross Site Scripting XSS Date: 2023-06-23 country: Iran Exploit Author: Amirhossein Bahramizadeh Category : webapps Dork : /print.php?nmmember= Vendor Homepage:...
CVE-2023-36347
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data...
CVE-2023-36347
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data...
CVE-2023-36347
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data...
CVE-2023-36347
POS Codekop v2.0 is affected by a broken authentication flaw in the endpoint excel.php that allows unauthenticated access to download selling data. The issue stems from improper authentication/session handling, enabling an attacker to retrieve sensitive data without valid login. Impact is describ...
CVE-2023-36347
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data...
CVE-2023-36347
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data...
PT-2023-25544 · Unknown · Pos Codekop
Name of the Vulnerable Software and Affected Versions: POS Codekop version 2.0 Description: A broken authentication mechanism in the endpoint "excel.php" allows unauthenticated attackers to download selling data. Recommendations: For POS Codekop version 2.0, consider restricting access to the...
CVE-2023-36345
A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...
CVE-2023-36345
A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...
CVE-2023-36346
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...