CVE-2025-12293

HIGH

Janobe Point OF Sales - Injection

Title source: rule

Description

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0005
EPSS Percentile 15.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-74 CWE-89
Status published

Affected Products (1)

janobe/point_of_sales

Timeline

Published Oct 27, 2025
Tracked Since Feb 18, 2026