Vulnerabilities

TI-2025-32455 CVE-2025-52026 · GHSA-wfx8-p4c3-pcqp

An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers…

LOW 39

An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00301 Published 2026-01-23 No fix listed CWE-200

TI-2025-32454 CVE-2025-52025 · GHSA-9xv2-m482-wm2m

An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the…

MEDIUM 46

An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00364 Published 2026-01-23 No fix listed CWE-89

TI-2025-32453 CVE-2025-52024 · GHSA-hcr4-42v2-c272

A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28…

MEDIUM 47

A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00452 Published 2026-01-23 No fix listed CWE-306

TI-2025-32452 CVE-2025-52023 · GHSA-39jx-3m57-r6qr

A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows…

LOW 30

A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00453 Published 2026-01-23 No fix listed CWE-209

TI-2025-32451 CVE-2025-52022 · GHSA-qh5x-8q5j-whhf

A vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg thru 2025-05-28 allows…