CVE-2022-40296

概要

参考情報

• themissinglink.com.au/security-advisories/cve-2022-40296 · Third Party Advisory

php point of sale のその他の脆弱性

• CVE-2025-41011中 6.1HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to…
• CVE-2022-40295中 4.9The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which co…
• CVE-2022-40294高 8.8 The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within exp…
• CVE-2022-40293緊急 9.8 The application was vulnerable to a session fixation that could be used hijack accounts.
• CVE-2022-40292中 5.3 The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each acco…