CVE-2025-12293

CVE-2025-12293 concerns SourceCodester Point of Sales 1.0. A SQL injection vulnerability arises from improper handling of the Category argument in the /category.php file, exploitable remotely. Multiple sources note the exploit is publicly available. Reported impacts include confidentiality, integ...

CVE-2025-12294

SourceCodester Point of Sales 1.0 is affected by a SQL injection in the delete_category.php endpoint, triggered by manipulating the ID parameter. The vulnerability is exploitable remotely and has been publicly disclosed, with multiple sources confirming the issue and its impact. The root cause is...

CVE-2025-12292

SourceCodester Point of Sales 1.0 contains a SQL injection vulnerability in /index.php through manipulation of the Username parameter. This allows remote exploitation with no user interaction, as described across multiple sources (NVD, Red Hat, ENISA, CVE records). The vulnerability affects unkno...