CVE-2022-40290

概要

参考情報

• themissinglink.com.au/security-advisories/cve-2022-40290 · Third Party Advisory

php point of sale のその他の脆弱性

• CVE-2025-41011中 6.1HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to…
• CVE-2022-40296緊急 9.8 The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints,…
• CVE-2022-40295中 4.9The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which co…
• CVE-2022-40294高 8.8 The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within exp…
• CVE-2022-40293緊急 9.8 The application was vulnerable to a session fixation that could be used hijack accounts.