| Package | Affected versions | Patched versions |
|---|---|---|
| simple pos | = 4.0.24 |
Simple POS 4.0.24 allows SQL Injection via a products/get_products/ columns[0][search][value] parameter in the management panel, as demonstrated by products/get_products/1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free