CVE-2022-40294

概要

参考情報

• themissinglink.com.au/security-advisories/cve-2022-40294 · Third Party Advisory

php point of sale のその他の脆弱性

• CVE-2025-41011中 6.1HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to…
• CVE-2022-40296緊急 9.8 The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints,…
• CVE-2022-40295中 4.9The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which co…
• CVE-2022-40293緊急 9.8 The application was vulnerable to a session fixation that could be used hijack accounts.
• CVE-2022-40292中 5.3 The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each acco…