PT-2023-18369 · Campcodes · Campcodes Coffee Shop Pos System
CVE-2023-2209
·
Publicado
2023-04-21
·
Atualizado
2024-05-17
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Campcodes Coffee Shop POS System version 1.0
Description
A critical issue was found in the system, affecting an unknown function of the file /admin/sales/view details.php. The manipulation of the
id argument leads to SQL injection. It is possible to launch the attack remotely. The issue has been disclosed to the public.Recommendations
For version 1.0, consider disabling access to the /admin/sales/view details.php file until a patch is available. Restrict the use of the
id argument in the affected file to minimize the risk of exploitation.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Campcodes Coffee Shop Pos System