Php Point Of Sale PHP Point Of Sale

Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via user profile data fields.

Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via messaging functionality

Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via file upload and download functionality.

CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC

Cross-site request forgery (CSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC

Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

HTML injection in PHP Point Of Sale

Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.

Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.