CVE-2024-1267

The connected documents confirm CVE-2024-1267 affects CodeAstro Restaurant POS System v1.0, where the file create_account.php is vulnerable through manipulation of the Full Name parameter, causing cross-site scripting. The vulnerability can be exploited remotely and the exploit has been publicly ...

CVE-2022-43085

CVE-2022-43085 affects Restaurant POS System v1.0, specifically the add_product.php file. The vulnerability is an arbitrary file upload that lets an attacker execute arbitrary PHP code by uploading a crafted file. According to multiple sources, this can lead to remote code execution with likely h...

CVE-2022-43086

CVE-2022-43086 affects Restaurant POS System v1.0. A SQL injection vulnerability exists in the file update_customer.php, allowing attacker-controlled input to influence SQL queries. Reported impact highlights high confidentiality impact with no integrity or availability impact per the provided me...