CVE-2023-27202

CriticalCVSS 9.8

Published: 09/03/2023(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

53th percentile - higher than 53% of all known CVEs

Summary

Best POS Management System 1.0 contains a SQL injection vulnerability in the id parameter at /kruxton/receipt.php. An attacker can exploit this flaw to manipulate database queries.

Risk Assessment

The risk includes unauthorized access to data, modification or deletion, and potential full system compromise.

Recommendation

Immediately validate and sanitize the id input and use parameterized queries (prepared statements).

Original NVD description (English source)

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.