Vulnerabilities

TI-2024-02246 CVE-2024-2418 · GHSA-qfgr-r5h6-vjv3

SourceCodester Best POS Management System view_order.php sql injection

HIGH 75

A vulnerability was found in SourceCodester Best POS Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0073 Published 2024-03-13 No fix listed CWE-89

TI-2024-02006 CVE-2024-2156 · GHSA-95ch-f6qf-fhcv

SourceCodester Best POS Management System admin_class.php sql injection

HIGH 75

A vulnerability was found in SourceCodester Best POS Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00556 Published 2024-03-04 No fix listed CWE-89

TI-2024-02005 CVE-2024-2155 · GHSA-cv92-qmv8-p8x9

SourceCodester Best POS Management System index.php file inclusion

MEDIUM 55

A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00513 Published 2024-03-04 No fix listed CWE-73

TI-2023-03376 CVE-2023-3617 · GHSA-xj8p-3q4c-9jvf

SourceCodester Best POS Management System Login Page admin_class.php sql injection

MEDIUM 44

A vulnerability was found in SourceCodester Best POS Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00826 Published 2023-07-11 No fix listed CWE-89

TI-2023-11973 CVE-2023-27206 · GHSA-jq94-w3m5-hp9r

A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management…

LOW 28

A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00434 Published 2023-03-09 No fix listed CWE-79

TI-2023-11972 CVE-2023-27205 · GHSA-jjwj-rvvf-gmw9

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 50

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00788 Published 2023-03-09 No fix listed CWE-89

TI-2023-11971 CVE-2023-27204 · GHSA-x6qf-qqph-6mw5

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 50

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00788 Published 2023-03-09 No fix listed CWE-89

TI-2023-11970 CVE-2023-27203 · GHSA-5p6g-9gqq-ghhg

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 50

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00788 Published 2023-03-09 No fix listed CWE-89

TI-2023-11969 CVE-2023-27202 · GHSA-2hmx-3545-xw8f

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 50

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00788 Published 2023-03-09 No fix listed CWE-89

TI-2023-00897 CVE-2023-0946 · GHSA-572p-5872-3ffh

SourceCodester Best POS Management System sql injection

MEDIUM 49

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2023-02-21 No fix listed CWE-89

TI-2023-00896 CVE-2023-0945 · GHSA-j5rf-jfvv-2w7f

SourceCodester Best POS Management System cross site scripting

LOW 24

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00356 Published 2023-02-21 No fix listed CWE-79

TI-2023-00894 CVE-2023-0943 · GHSA-59rv-395v-g9xw

SourceCodester Best POS Management System Image save_settings unrestricted upload

MEDIUM 42

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02266 Published 2023-02-21 No fix listed CWE-434

Vulnerabilities

Filters