CVE-2018-17110
CRITICALSimple POS 4.0.24 - SQL Injection
Title source: llmDescription
Simple POS 4.0.24 allows SQL Injection via a products/get_products/ columns[0][search][value] parameter in the management panel, as demonstrated by products/get_products/1.
Exploits (1)
Scores
CVSS v3
9.8
EPSS
0.0029
EPSS Percentile
52.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
tecdiary/simple_pos
4.0.24
Published
Sep 17, 2018
Tracked Since
Feb 18, 2026