CVE-2023-27204

CriticalCVSS 9.8

Published: 09/03/2023(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

53th percentile - higher than 53% of all known CVEs

Best POS Management System 1.0 contains a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.

An attacker can manipulate SQL queries, potentially leading to unauthorized data access or modification.

Use parameterized queries or input validation for the id parameter.

Original NVD description (English source)

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.