Web Based Inventory And Pos System
Monthly
SQL injection in code-projects Web-Based Inventory and POS System 1.0 allows authenticated remote attackers to execute arbitrary SQL queries via the shopid parameter in /transaction.php, resulting in limited data confidentiality, integrity, and availability impact. The CVSS 2.1 score reflects low severity due to authentication requirement and constrained scope, but publicly available exploit code exists and the vulnerability has been publicly disclosed.
Unauthenticated SQL injection in code-projects Web-Based Inventory and POS System 1.0 allows remote attackers to manipulate the emailid parameter on login.php, potentially leading to data theft, authentication bypass, or database corruption. Public exploit code is available, but EPSS indicates a low probability of exploitation (0.03%). No vendor patch has been identified.
SQL injection in code-projects Web-Based Inventory and POS System 1.0 allows authenticated remote attackers to execute arbitrary SQL queries via the shopid parameter in /transaction.php, resulting in limited data confidentiality, integrity, and availability impact. The CVSS 2.1 score reflects low severity due to authentication requirement and constrained scope, but publicly available exploit code exists and the vulnerability has been publicly disclosed.
Unauthenticated SQL injection in code-projects Web-Based Inventory and POS System 1.0 allows remote attackers to manipulate the emailid parameter on login.php, potentially leading to data theft, authentication bypass, or database corruption. Public exploit code is available, but EPSS indicates a low probability of exploitation (0.03%). No vendor patch has been identified.