CVE-2023-36345
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and data manipulation, posing a serious threat to organizational security.
Recommendation
It is recommended to update to the latest version of the software and implement protections against CSRF attacks.
Other vulnerabilities in POS Codekop v2.0
See all- CVE-2023-36347High
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.
- CVE-2023-36348High
Version 2.0 of POS Codekop has an authenticated remote code execution (RCE) vulnerability via the filename parameter.
- CVE-2023-36346Medium
Version 2.0 of POS Codekop was found to contain a reflected XSS vulnerability via the nm_member parameter in print.php.
Original NVD description (English source)
A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges.