Description
RimbaLinux AhadPOS 1.11 contains a SQL injection vulnerability in the 'alamatCustomer' parameter that allows attackers to manipulate database queries through crafted POST requests. Attackers can exploit time-based and boolean-based blind SQL injection techniques to extract information or potentially interact with the underlying database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rimbalinux | AhadPOS | 1.11 | — |
References
- ExploitDB-47585 exploit
- Vendor Homepage product
- VulnCheck Advisory: rimbalinux AhadPOS 1.11 - 'alamatCustomer' SQL Injection third-party-advisory