CVE-2023-27206

CVE-2023-27206 affects Best POS Management System v1.0, with an XSS flaw in /kruxton/navbar.php exploitable via a crafted payload in the page parameter. The vulnerability stems from improper handling of user-controllable input, enabling execution of arbitrary web scripts/HTML in the context of th...

CVE-2023-24320

An access control issue in Axcora POS 0gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via unspecified vectors...

Design/Logic Flaw

An access control issue in Axcora POS 0gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via unspecified vectors...

CVE-2023-0946

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotel...

CVE-2023-0945

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input " leads to cross site scripting. It is possible to launch...

Sql injection

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotel...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input " leads to cross site scripting. It is possible to launch...

CVE-2023-0943

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function savesettings of the file index.php?page=sitesettings of the component Image Handler. The manipulation of the argument img with the input...

CVE-2023-0943

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function savesettings of the file index.php?page=sitesettings of the component Image Handler. The manipulation of the argument img with the input...

Out-of-bounds

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function savesettings of the file index.php?page=sitesettings of the component Image Handler. The manipulation of the argument img with the input...

CVE-2023-0946

The CVE-2023-0946 entry affects SourceCodester Best POS Management System 1.0, specifically the billing/index.php?id=9 parameter. The root cause is input manipulation that enables SQL injection, enabling remote exploitation with impact on confidentiality, integrity, and availability reported as h...

CVE-2023-0946 SourceCodester Best POS Management System sql injection

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotel...

CVE-2023-0946 SourceCodester Best POS Management System sql injection

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotel...

CVE-2023-0945 SourceCodester Best POS Management System cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input " leads to cross site scripting. It is possible to launch...

CVE-2023-0945

SourceCodester Best POS Management System 1.0 contains an XSS vulnerability in the endpoint index.php?page=add-category. The Name parameter can be manipulated with a payload like > to trigger cross-site scripting. The issue affects the specific function handling the add-category page and can b...

CVE-2023-0943

CVE-2023-0943 affects SourceCodester Best POS Management System v1.0, specifically the Image Handler’s save_settings function (index.php?page=site_settings). The vulnerability arises from unsafely handling the img argument (input ../../shell.php), enabling unrestricted file upload and potential r...

CVE-2023-0943 SourceCodester Best POS Management System Image save_settings unrestricted upload

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function savesettings of the file index.php?page=sitesettings of the component Image Handler. The manipulation of the argument img with the input...

Best pos management system SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which originates from the presence of an unknown function in the file billing/index.php?id=9, which can be exploited by an...

CVE-2023-24320

An access control issue in Axcora POS 0gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via unspecified vectors...

PT-2023-16629 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A problematic issue has been found in the Image Handler component, affecting the function save settings of the file "index.php?page=site settings". The manipulation of the...