Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-40292 EUVD-2022-43589GHSA-62xx-cv5c-2cjf

Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

Published Oct 31, 2022 · Updated May 6, 2025 · Assigned by TML

Description

The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each account within the system.

Affected products

VendorProductAffectedFixed
PHP Point of Sale PHP Point of Sale — —

References