Vulnerabilities

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2.

A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2.

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2.

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.

OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function.

OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currency_symbol configuration field.

A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.

A cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category pa…

An issue in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code via returning a crafted AJAX response.

A cross-site scripting (XSS) vulnerability in the Customers function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Phone Number parameter.

A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Name parameter.

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.

A Cross-site scripting (XSS) vulnerability in Create/Update Item Kit(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the "name" parameter.

A Cross-site scripting (XSS) vulnerability in Create/Update Customer(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the phone_number parameter.

A Cross-site scripting (XSS) vulnerability in Create/Update Item(s) Module in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the "name" parameter.

The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account password to an empty string due to missing server-side validation.

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page.