Php Point Of Sale 19.0
Approved changes feed: RSS · Atom
cpe:2.3:a:phppointofsale:php_point_of_sale:19.0:*:*:*:*:*:*:*part: a version: 19.0 update: *
| Vendor | Phppointofsale (eb143190-8778-52ff-8b42-f4eea5e2c8a0) |
|---|---|
| Product | Php Point Of Sale (cefa1d3c-89a5-5ef4-ae9a-e5a30f4d77f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-40296 |
vulnerable | 2026-06-08 05:48:24.623713 |
Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially including internal and local services, leading to attacks in other downstream systems.
Published: 2022-10-31T20:07:56.767Z
Updated: 2025-05-06T19:15:40.038Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40295 |
vulnerable | 2026-06-08 05:48:24.623159 |
Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the compromise of plaintext passwords via offline attacks.
Published: 2022-10-31T20:08:53.909Z
Updated: 2024-08-03T12:14:40.090Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40294 |
vulnerable | 2026-06-08 05:48:24.622644 |
CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC
The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers.
Published: 2022-10-31T20:09:23.823Z
Updated: 2025-05-06T14:48:34.838Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40293 |
vulnerable | 2026-06-08 05:48:24.622173 |
Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
The application was vulnerable to a session fixation that could be used hijack accounts.
Published: 2022-10-31T20:05:55.050Z
Updated: 2025-05-06T19:21:46.154Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40292 |
vulnerable | 2026-06-08 05:48:24.621710 |
Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each account within the system.
Published: 2022-10-31T20:07:10.233Z
Updated: 2025-05-06T19:18:55.380Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40291 |
vulnerable | 2026-06-08 05:48:24.621360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40290 |
vulnerable | 2026-06-08 05:48:24.620907 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40289 |
vulnerable | 2026-06-08 05:48:24.620448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40288 |
vulnerable | 2026-06-08 05:48:24.620040 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40287 |
vulnerable | 2026-06-08 05:48:24.619570 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.