Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-36346

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the nm_member parameter at print.php.

CVSS 3.1 · 6.1 Medium EPSS 5.3% KEV · Not listed
Vendors
Codekop
Products
Codekop
CVE-2023-36348

POS Codekop v2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the filename parameter.

CVSS 3.1 · 8.8 High EPSS 6.4% KEV · Not listed
Vendors
Codekop
Products
Codekop
CVE-2023-36345

A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Codekop
Products
Codekop
CVE-2023-36347

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.

CVSS 3.1 · 7.5 High EPSS 34.1% KEV · Not listed
Vendors
Codekop
Products
Codekop