EXPOSURES › CVE-2025-12292

CVE-2025-12292

HIGH

DETAIL

SourceNVD · cve Published2025-10-27 CVSS7.3 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-12292 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

janobe · vendor point of sales · product

DESCRIPTION

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.