Description (CNA)
A vulnerability was determined in Campcodes Complete POS Management and Inventory System up to 4.0.6. This affects an unknown function of the file app/Http/Controllers/SettingsController.php of the component Environment Variable Handler. Executing a manipulation can lead to injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Campcodes / Complete POS Management and Inventory System | affected 4.0.0; affected 4.0.1; affected 4.0.2; affected 4.0.3; affected 4.0.4; affected 4.0.5; affected 4.0.6 |
CWE
CWE-74, CWE-707
References
- https://vuldb.com/vuln/355331
- https://vuldb.com/vuln/355331/cti
- https://vuldb.com/submit/782934
- https://github.com/whatyourname12345/CVE/blob/main/POS/cve.md
- https://www.campcodes.com/
ADP enrichment
No English description supplied.
No references supplied.