CVE-2025-41011中 6.1HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to…
CVE-2022-40296緊急 9.8
The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints,…
CVE-2022-40295中 4.9The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which co…
CVE-2022-40294高 8.8
The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within exp…
CVE-2022-40292中 5.3
The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each acco…