Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

PT-2023-25543 · Unknown · Pos Codekop

Name of the Vulnerable Software and Affected Versions: POS Codekop version 2.0 Description: A reflected cross-site scripting XSS issue was found in POS Codekop. The issue is related to the nm member parameter at the "print.php" endpoint. This allows for potential XSS attacks. Recommendations: For...

CVE-2023-36346

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

PT-2023-25542 · Unknown · Pos Codekop

Name of the Vulnerable Software and Affected Versions: POS Codekop version 2.0 Description: A Cross-Site Request Forgery CSRF issue allows attackers to escalate privileges. Recommendations: For POS Codekop version 2.0, consider implementing proper CSRF token validation to prevent unauthorized...

CVE-2023-36346

POS Codekop v2.0 has a reflected XSS vulnerability in the print.php endpoint through the nm_member parameter. Affects the web application’s print.php handling, enabling injection of script code that could be executed in users’ browsers. The Nuclei template and Red Hat/NVD references confirm the i...

CVE-2023-36345

POS Codekop v2.0 is affected by a CSRF vulnerability that can allow privilege escalation. The root cause is a Cross-Site Request Forgery issue, with no public details about a fix in the provided sources. The PT-2023-25542 entry recommends CSRF token validation and restricting sensitive operations...

CVE-2023-36348

POS Codekop v2.0 contains an authenticated remote code execution (RCE) vulnerability stemming from insufficient sanitization of the filename parameter in the edit flow (/upload path). Specifically, the flaw allows an authenticated attacker to upload a PHP file via the filename field and access it...

POS Codekop 安全漏洞

POS Codekop is an application. A security vulnerability exists in POS Codekop version 2.0 that stems from the presence of a remote code execution RCE vulnerability...

CVE-2023-36345

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

PT-2023-25545 · Unknown · Pos Codekop

Name of the Vulnerable Software and Affected Versions: POS Codekop version 2.0 Description: The issue is related to an authenticated remote code execution RCE vulnerability. It can be exploited via the filename parameter. Recommendations: For POS Codekop version 2.0, consider restricting access t...

CVE-2023-36345

A Cross-Site Request Forgery CSRF in POS Codekop v2.0 allows attackers to escalate privileges...

Campcodes Coffee Shop POS System SQL Injection Vulnerability (CNVD-2023-38605)

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of validation of the parameter id of the file managesale.php against external SQL input, which can be exploited ...

Campcodes Coffee Shop POS System SQL Injection Vulnerability (CNVD-2023-38606)

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from a lack of validation of the parameter id of the file manageuser.php against externally-entered SQL statements, which can ...

Campcodes Coffee Shop POS System SQL Injection Vulnerability (CNVD-2023-38610)

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. A SQL injection vulnerability exists in Campcodes Coffee Shop POS System version 1.0, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Campcodes Coffee Shop POS System Cross-Site Scripting Vulnerability

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. A cross-site scripting vulnerability exists in Campcodes Coffee Shop POS System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the firstname parameter of the Users.php file,...

Campcodes Coffee Shop POS System SQL Injection Vulnerability (CNVD-2023-38611)

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. A SQL injection vulnerability exists in Campcodes Coffee Shop POS System version 1.0, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Campcodes Coffee Shop POS System SQL Injection Vulnerability (CNVD-2023-38607)

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of validation of external SQL input in the parameter id of the file viewproduct.php, which can be exploited by a...

CVE-2023-2216

A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. Th...

Cross site scripting

A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. Th...

CVE-2023-2216

CVE-2023-2216 affects Campcodes Coffee Shop POS System v1.0. The vulnerability is in an unknown functionality of /classes/Users.php where manipulating the firstname parameter triggers cross-site scripting. Attacks can be launched remotely and the exploit has been publicly disclosed. No patch/vers...