← Database

CVE-2021-41492

CRITICAL CVSS: 9.8 Published: 2021-11-03 Modified: 2026-06-17

Description

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System (POS) 1.0 via the (1) Product Code in the pos page in cashiering. (2) id parameter in manage_products and the (3) t paramater in actions.php.

Affected Platforms

Simple Cashiering System Project Simple Cashiering System

Weakness Type

CWE-89

References