CVE-2023-36347

Impact

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.youtube.com/watch?v=7qaIeE2cyO4
• https://yuyudhn.github.io/pos-codekop-vulnerability/
• https://www.youtube.com/watch?v=7qaIeE2cyO4
• https://yuyudhn.github.io/pos-codekop-vulnerability/