Описание
Simple POS 4.0.24 allows SQL Injection via a products/get_products/ columns[0][search][value] parameter in the management panel, as demonstrated by products/get_products/1.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:tecdiary:simple_pos:4.0.24:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.00251
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 9.8
github
около 3 лет назад
Simple POS 4.0.24 allows SQL Injection via a products/get_products/ columns[0][search][value] parameter in the management panel, as demonstrated by products/get_products/1.
EPSS
Процентиль: 48%
0.00251
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89