Vulnerabilities (CVE)

Filtered by vendor Martmbithi Subscribe
Filtered by product Pos System
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-5796 1 Martmbithi 1 Pos System 2024-05-17 6.5 MEDIUM 8.8 HIGH
A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-243602 is the identifier assigned to this vulnerability.
CVE-2023-5795 1 Martmbithi 1 Pos System 2024-05-17 6.5 MEDIUM 8.8 HIGH
A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profil of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243601 was assigned to this vulnerability.