Description
The application was vulnerable to a session fixation that could be used hijack accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHP Point of Sale | PHP Point of Sale | — | — |
Critical · 9.8
CVE-2022-40293
EUVD-2022-43590GHSA-v34v-rxgw-mh4g
Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
Published Oct 31, 2022 · Updated May 6, 2025 · Assigned by TML