EXPOSURES › CVE-2025-12294

CVE-2025-12294

MEDIUM

DETAIL

SourceNVD · cve Published2025-10-27 CVSS4.7 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-12294 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

janobe · vendor point of sales · product

DESCRIPTION

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /delete_category.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.