CVE-2023-27205

CriticalCVSS 9.8

Published: 09/03/2023(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

53th percentile - higher than 53% of all known CVEs

Best POS Management System 1.0 contains a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.

An attacker can manipulate SQL queries, potentially leading to unauthorized data access or modification.

Use parameterized queries or input validation for the month parameter.

Original NVD description (English source)

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.