CVE-2025-41011

概要

参考情報

• incibe.es/en/incibe-cert/notices/aviso/html-injection-php-point-sale-0 · Third Party Advisory

php point of sale のその他の脆弱性

• CVE-2022-40296緊急 9.8 The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints,…
• CVE-2022-40295中 4.9The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which co…
• CVE-2022-40294高 8.8 The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within exp…
• CVE-2022-40293緊急 9.8 The application was vulnerable to a session fixation that could be used hijack accounts.
• CVE-2022-40292中 5.3 The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each acco…