CVE-2025-52025

The Aptsys gemscms POS Platform (versions prior to 2025-05-29 ) contains an SQL Injection vulnerability in the GetServiceByRestaurantID endpoint. The root cause is the direct insertion of user-supplied input into a dynamic SQL query without sufficient sanitization or parameterization. An attacker...

CVE-2025-52025

An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28. The vulnerability arises because user input is directly inserted into a dynamic SQL query syntax without proper sanitization or parameterization. This allows ...

Aptsys Gemscms POS Platform security vulnerabilities

Aptsys Gemscms POS Platform is a catering management system developed by the Indian company Aptsys. There is a security vulnerability in the Aptsys Gemscms POS Platform. This vulnerability stems from the GetServiceByRestaurantID endpoint, which does not properly clean or parameterize user inputs,...