CVE-2023-2215

Campcodes Coffee Shop POS System v1.0 is susceptible to a critical SQL injection vulnerability in an unknown function of the /admin/user/manage_user.php file. The root cause is a lack of proper validation for the id parameter, which allows an attacker to submit externally-entered SQL statements t...

CVE-2023-2212

CVE-2023-2212 affects Campcodes Coffee Shop POS System v1.0. The SQL injection vulnerability stems from unsafely handling the id parameter in /admin/products/view_product.php, enabling remote exploitation. Multiple connected sources confirm the issue and public disclosure, with no provided patch/...

CVE-2023-2209

CVE-2023-2209 affects Campcodes Coffee Shop POS System 1.0. An SQL injection can be triggered by manipulating the id parameter in the /admin/sales/view_details.php file. The vulnerability is exploitable remotely and exploits have been disclosed publicly (VDB-226974). Affected function is unknown;...

CVE-2023-2211

CVE-2023-2211 corresponds to Campcodes Coffee Shop POS System 1.0. A SQL injection vulnerability exists in the file /admin/categories/manage_category.php through the id parameter. Attackers may exploit remotely, and public disclosures exist. Supported details across sources confirm the vulnerabil...

CVE-2023-2213

CVE-2023-2213 affects Campcodes Coffee Shop POS System v1.0. The vulnerability is a SQL injection in the file /admin/products/manage_product.php caused by unsafely handling the id parameter, enabling remote exploitation. Multiple connected sources confirm the issue and the exploitation is public....

CVE-2023-2216

CVE-2023-2216 affects Campcodes Coffee Shop POS System v1.0. The vulnerability is in an unknown functionality of /classes/Users.php where manipulating the firstname parameter triggers cross-site scripting. Attacks can be launched remotely and the exploit has been publicly disclosed. No patch/vers...

CVE-2023-2214

CVE-2023-2214 affects Campcodes Coffee Shop POS System v1.0. The vulnerability is an SQL injection in the /admin/sales/manage_sale.php file caused by unsafely handling the id parameter. It can be triggered remotely; exploits have been disclosed publicly (VDB-226979). Reports from multiple sources...

CVE-2023-2210

CVE-2023-2210 affects Campcodes Coffee Shop POS System 1.0. The vulnerability is an SQL injection in the vulnerable function handling /admin/categories/view_category.php, triggered by manipulating the id parameter. This can be exploited remotely and could lead to data exposure or modification as ...