Campcodes Coffee Shop POS System SQL注入漏洞

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of validation of the parameter id of the file manageproduct.php for externally-entered SQL statements, which can...

HOCKEY COMPUTINDO Bang Resto SQL注入漏洞

HOCKEY COMPUTINDO Bang Resto is a point of sale restaurant open source code from HOCKEY COMPUTINDO Indonesia. A security vulnerability exists in HOCKEY COMPUTINDO Bang Resto v1.0. An attacker exploited the vulnerability to perform a SQL injection attack...

Payment giant's point-of-sale outage caused by ALPHV ransomware

On April 12, 2023, payment giant NCR reported it was looking into an issue with its point-of-sale POS systems that caused an outage, leaving customers unable to use the system. The NCR Aloha POS systems are popular in hospitality services. Customers include Wendys, Chuck e Cheese, Cafe Rio, Leean...

CVE-2023-27204

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

CVE-2023-27205

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/salesreport.php...

CVE-2023-27204

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

CVE-2023-27203

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...

CVE-2023-27203

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...

Sql injection

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...

Sql injection

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php...

Sql injection

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

Sql injection

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/salesreport.php...

CVE-2023-27204

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

CVE-2023-27202

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php...

CVE-2023-27205

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/salesreport.php...

CVE-2023-27205

CVE-2023-27205 affects Best POS Management System 1.0. A SQL injection vulnerability exists in the /kruxton/sales_report.php endpoint, exploitable via the month parameter. The linked data indicate a high-severity issue (CVSS v3.1: 9.8, Network attack vector, no privileges required, no user intera...

CVE-2023-27203

CVE-2023-27203 affects Best POS Management System 1.0, with a SQL injection flaw exploitable through the id parameter in /billing/home.php. The issue allows an attacker to cause high-severity impact on confidentiality, integrity, and availability (CVSS 3.1: 9.8, Network, Low attack complexity, No...

CVE-2023-27202

CVE-2023-27202 affects Best POS Management System 1.0. The vulnerability is a SQL injection in the /kruxton/receipt.php endpoint, exploitable via the id parameter. According to the CVSS/metrics in the records, it yields a CRITICAL impact with high confidentiality, integrity, and availability risk...

CVE-2023-27206

CVE-2023-27206 affects Best POS Management System v1.0, with an XSS flaw in /kruxton/navbar.php exploitable via a crafted payload in the page parameter. The vulnerability stems from improper handling of user-controllable input, enabling execution of arbitrary web scripts/HTML in the context of th...

CVE-2023-27204

CVE-2023-27204 affects Best POS Management System 1.0. A SQL injection vulnerability exists via the id parameter at /kruxton/manage_user.php, enabling potential unauthorized data access with network vector, no authentication required, and high impact (C, I, A: HIGH). No concrete patches or fixes ...