Approved changes feed: RSS · Atom

cpe:2.3:a:best_pos_management_system_project:best_pos_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorBest Pos Management System Project (1fbf4c52-99cb-518a-a500-c0d39a4cf1eb)
ProductBest Pos Management System (b8beecab-2b45-5207-8682-84894b5405ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3617 vulnerable 2026-06-08 06:09:40.022139 SourceCodester Best POS Management System Login Page admin_class.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin_class.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233565 was assigned to this vulnerability.
Published: 2023-07-11T15:00:03.716Z
Updated: 2024-08-02T07:01:57.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27206 vulnerable 2026-06-08 05:57:40.715709 Details available
A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.
Published: 2023-03-09T00:00:00.000Z
Updated: 2025-02-28T17:20:30.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27205 vulnerable 2026-06-08 05:57:40.715426 Details available
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.
Published: 2023-03-09T00:00:00.000Z
Updated: 2025-02-28T17:22:31.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27204 vulnerable 2026-06-08 05:57:40.715004 Details available
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.
Published: 2023-03-09T00:00:00.000Z
Updated: 2025-02-28T17:23:13.128Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27203 vulnerable 2026-06-08 05:57:40.714515 Details available
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php.
Published: 2023-03-09T00:00:00.000Z
Updated: 2025-03-05T17:17:10.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27202 vulnerable 2026-06-08 05:57:40.714035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0946 vulnerable 2026-06-08 05:52:33.492673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0945 vulnerable 2026-06-08 05:52:33.492136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0943 vulnerable 2026-06-08 05:52:33.489576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.