SourceCodester Best POS Management System admin_class.php sql injection
Published Mar 4, 2024
9.8
CRITICALCVSS 3.1
EPSS 0.56%
Description
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin_class.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255588.
Affected products
-
Affected
- 1.0
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| SourceCodester | Best POS Management System | unknown | Affected
|
- 1.0
-
Affected
- 1.0
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| SourceCodester | Best Pos Management System | unknown | Affected
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27120 Advisory
- https://github.com/wkeyi0x1/vul-report/blob/main/Best%20pos%20management%20system%20in%20php/Report-SQLI-1.md exploitBroken Link
- https://vuldb.com/?ctiid.255588 signaturepermissions-requiredBroken LinkPermissions Required
- https://vuldb.com/?id.255588 vdb-entrytechnical-descriptionThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27120 | Advisory | |
| https://github.com/wkeyi0x1/vul-report/blob/main/Best%20pos%20management%20system%20in%20php/Report-SQLI-1.md | exploitBroken Link | |
| https://vuldb.com/?ctiid.255588 | signaturepermissions-requiredBroken LinkPermissions Required | |
| https://vuldb.com/?id.255588 | vdb-entrytechnical-descriptionThird Party Advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data