critical9.8Public exploit code
CVE-2018-18805
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Point of Sales (POS) in VB.Net MySQL Database 1.0 - SQL Injection2018-10-29 · webapps · php
Impact
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pointofsales Project | Pointofsales | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/150013/Point-Of-Sales-POS-In-VB.Net-MYSQL-Database-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/45721/
- https://www.sourcecodester.com/visual-basic-net/12655/point-sales-pos-vbnet-and-mysql-database.html
- http://packetstormsecurity.com/files/150013/Point-Of-Sales-POS-In-VB.Net-MYSQL-Database-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/45721/
- https://www.sourcecodester.com/visual-basic-net/12655/point-sales-pos-vbnet-and-mysql-database.html