CVE Catalog
CVE-2023-36347
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk32.35%
98th percentile - higher than 98% of all known CVEs
Summary
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.
Risk Assessment
The organization is at risk of losing sensitive selling data, which could lead to serious financial and reputational consequences.
Recommendation
It is recommended to update the POS Codekop system to the latest version and implement additional security measures to protect the data.
Original NVD description (English source)
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.