CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2418 – SourceCodester Best POS Management System view_order.php sql injection
https://notcve.org/view.php?id=CVE-2024-2418
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view_order.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. • https://github.com/ycxdzj/CVE_Hunter/blob/main/SQLi-6.md https://vuldb.com/?ctiid.256705 https://vuldb.com/?id.256705 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2156 – SourceCodester Best POS Management System admin_class.php sql injection
https://notcve.org/view.php?id=CVE-2024-2156
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin_class.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. • https://github.com/wkeyi0x1/vul-report/blob/main/Best%20pos%20management%20system%20in%20php/Report-SQLI-1.md https://vuldb.com/?ctiid.255588 https://vuldb.com/?id.255588 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2155 – SourceCodester Best POS Management System index.php file inclusion
https://notcve.org/view.php?id=CVE-2024-2155
A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/wkeyi0x1/vul-report/blob/main/Best%20pos%20management%20system%20in%20php/report.md https://vuldb.com/?ctiid.255587 https://vuldb.com/?id.255587 • CWE-73: External Control of File Name or Path •