Description
Simple POS 4.0.24 allows SQL Injection via a products/get_products/ columns[0][search][value] parameter in the management panel, as demonstrated by products/get_products/1.
References
- 45328 exploit
Unscored
CVE-2018-17110
EUVD-2018-8888GHSA-xxwf-86w4-2rh3
Simple POS 4.0.24 allows SQL Injection via a products/get_products/ columns[0][search][value] parameter in the management panel, as demonst…
Published Sep 17, 2018 · Updated Aug 5, 2024 · Assigned by mitre