1050 matches found
Sql injection
A vulnerability was found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...
CVE-2023-2211
CVE-2023-2211 corresponds to Campcodes Coffee Shop POS System 1.0. A SQL injection vulnerability exists in the file /admin/categories/manage_category.php through the id parameter. Attackers may exploit remotely, and public disclosures exist. Supported details across sources confirm the vulnerabil...
CVE-2023-2211 Campcodes Coffee Shop POS System manage_category.php sql injection
A vulnerability was found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...
CVE-2023-2210 Campcodes Coffee Shop POS System view_category.php sql injection
A vulnerability has been found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/categories/viewcategory.php. The manipulation of the argument id leads to sql injection. The attack can be launched...
CVE-2023-2210
CVE-2023-2210 affects Campcodes Coffee Shop POS System 1.0. The vulnerability is an SQL injection in the vulnerable function handling /admin/categories/view_category.php, triggered by manipulating the id parameter. This can be exploited remotely and could lead to data exposure or modification as ...
CVE-2023-2209
CVE-2023-2209 affects Campcodes Coffee Shop POS System 1.0. An SQL injection can be triggered by manipulating the id parameter in the /admin/sales/view_details.php file. The vulnerability is exploitable remotely and exploits have been disclosed publicly (VDB-226974). Affected function is unknown;...
CVE-2023-2209 Campcodes Coffee Shop POS System view_details.php sql injection
A vulnerability, which was classified as critical, was found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/sales/viewdetails.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has...
Campcodes Coffee Shop POS System SQL注入漏洞
Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of validation of the parameter id of the file manageproduct.php for externally-entered SQL statements, which can...
PT-2023-18370 · Campcodes · Campcodes Coffee Shop Pos System
Name of the Vulnerable Software and Affected Versions: Campcodes Coffee Shop POS System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/categories/view category.php. The manipulation of the id argument leads to sql...
Campcodes Coffee Shop POS System SQL注入漏洞
Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of validation of the parameter id of the file managesale.php against external SQL input, which can be exploited ...
PT-2023-18375 · Campcodes · Campcodes Coffee Shop Pos System
Name of the Vulnerable Software and Affected Versions: Campcodes Coffee Shop POS System version 1.0 Description: A critical issue affects the processing of the file /admin/sales/manage sale.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated remotely...
HOCKEY COMPUTINDO Bang Resto SQL注入漏洞
HOCKEY COMPUTINDO Bang Resto is a point of sale restaurant open source code from HOCKEY COMPUTINDO Indonesia. A security vulnerability exists in HOCKEY COMPUTINDO Bang Resto v1.0. An attacker exploited the vulnerability to perform a SQL injection attack...
Payment giant's point-of-sale outage caused by ALPHV ransomware
On April 12, 2023, payment giant NCR reported it was looking into an issue with its point-of-sale POS systems that caused an outage, leaving customers unable to use the system. The NCR Aloha POS systems are popular in hospitality services. Customers include Wendys, Chuck e Cheese, Cafe Rio, Leean...
CVE-2023-27204
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...
CVE-2023-27203
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...
CVE-2023-27205
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/salesreport.php...
CVE-2023-27203
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...
CVE-2023-27204
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...