Cyber Signals: Inside the growing risk of gift card fraud

In the ever-evolving landscape of cyberthreats, staying ahead of malicious actors is a constant challenge. Microsoft Threat Intelligence has observed that gift cards are attractive targets for fraud and social engineering practices. Unlike credit or debit cards, there’s no customer name or bank...

CVE-2023-23021

Cross Site Scripting XSS vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php...

PT-2024-11982 · Unknown · Sourcecodester Oretnom23 Pos Point Sale System

Name of the Vulnerable Software and Affected Versions: sourcecodester oretnom23 pos point sale system version 1.0 Description: The issue allows attackers to execute arbitrary code via the code, name, and description inputs in the file Main.php. This is a Cross Site Scripting XSS vulnerability...

CVE-2023-23021

CVE-2023-23021 describes a Cross Site Scripting (XSS) vulnerability in the sourcecodester Oretnom23 POS Point of Sale System v1.0. The issue arises from unsafely handling user-supplied input in the file Main.php through the fields code , name , and description , enabling an attacker to inject arb...

CVE-2024-20989

Oracle Hospitality Simphony (Simphony POS) is affected in versions 19.1.0–19.5.4 due to insufficient input validation in the POS component. The vulnerability allows a remote, unauthenticated attacker with network access (HTTP) to modify, add, or delete data and potentially gain unauthorized acces...

Kruxton 1.0 SQL Injection

Title: kruxton-1.0-Multiple-SQLi Author: nu11secur1ty Date: 04/15/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html Reference: https://portswigger.net/web-security/sql-injection Description: The username parameter appears ...

CVE-2024-2384

The WooCommerce POS plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.4.11. This is due to the plugin not properly verifying the authentication and authorization of the current user This makes it possible for authenticated attackers, with...

CVE-2024-2384

CVE-2024-2384 affects the WooCommerce POS plugin for WordPress. Versions ≤ 1.4.11 expose potentially sensitive user data due to insufficient authentication/authorization checks, allowing authenticated users with customer-level access (or higher) to view other users’ information by abusing an orde...

WordPress WooCommerce POS Plugin <= 1.4.11 is vulnerable to Sensitive Data Exposure

Software WooCommerce POS Type Plugin Vulnerable versions = 1.4.11 Fixed in 1.4.12 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2384 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3a9aafe43482 Credits Lucio Sá Required...

CVE-2024-2418

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /vieworder.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

CVE-2024-2418 SourceCodester Best POS Management System view_order.php sql injection

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /vieworder.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

CVE-2024-2418

CVE-2024-2418 affects SourceCodester Best POS Management System 1.0. A vulnerability in /view_order.php, via the id parameter, allows SQL injection. Exploitation is possible remotely and details indicate a critical risk in some sources, with the exploit disclosed publicly. No patch/version fixes ...

PT-2024-20307

Name of the Vulnerable Software and Affected Versions SourceCodester Best POS Management System version 1.0 Description A critical issue has been identified, affecting an unknown functionality of the file /view order.php. The manipulation of the id argument leads to SQL injection. This issue can ...

CVE-2024-2156

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file adminclass.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-2155

A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-2156

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file adminclass.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

Sql injection

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file adminclass.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

Design/Logic Flaw

A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-2156 SourceCodester Best POS Management System admin_class.php sql injection

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file adminclass.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-2156 SourceCodester Best POS Management System admin_class.php sql injection

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file adminclass.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. The exploit has be...