PT-2023-25544 · Unknown · Pos Codekop

Yudha P

·

CVE-2023-36347

·

Published

2023-06-30

·

Updated

2023-07-07

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions POS Codekop version 2.0
Description A broken authentication mechanism in the endpoint "excel.php" allows unauthenticated attackers to download selling data.
Recommendations For POS Codekop version 2.0, consider restricting access to the "excel.php" endpoint until a patch is available. As a temporary workaround, review and strengthen the authentication mechanism to prevent unauthorized access.

Exploit

Fix

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2023-36347

Affected Products

Pos Codekop