CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2418 – SourceCodester Best POS Management System view_order.php sql injection
https://notcve.org/view.php?id=CVE-2024-2418
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view_order.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. • https://github.com/ycxdzj/CVE_Hunter/blob/main/SQLi-6.md https://vuldb.com/?ctiid.256705 https://vuldb.com/?id.256705 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2156 – SourceCodester Best POS Management System admin_class.php sql injection
https://notcve.org/view.php?id=CVE-2024-2156
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin_class.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. • https://github.com/wkeyi0x1/vul-report/blob/main/Best%20pos%20management%20system%20in%20php/Report-SQLI-1.md https://vuldb.com/?ctiid.255588 https://vuldb.com/?id.255588 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2155 – SourceCodester Best POS Management System index.php file inclusion
https://notcve.org/view.php?id=CVE-2024-2155
A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/wkeyi0x1/vul-report/blob/main/Best%20pos%20management%20system%20in%20php/report.md https://vuldb.com/?ctiid.255587 https://vuldb.com/?id.255587 • CWE-73: External Control of File Name or Path •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3617 – SourceCodester Best POS Management System Login Page admin_class.php sql injection
https://notcve.org/view.php?id=CVE-2023-3617
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin_class.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. • https://github.com/movonow/demo/blob/main/kruxton.md https://vuldb.com/?ctiid.233565 https://vuldb.com/?id.233565 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-27205
https://notcve.org/view.php?id=CVE-2023-27205
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php. • https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20sales_report.php.md https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •