CVE-2023-36347
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.
Risk Assessment
The organization is at risk of losing sensitive selling data, which could lead to serious financial and reputational consequences.
Recommendation
It is recommended to update the POS Codekop system to the latest version and implement additional security measures to protect the data.
Other vulnerabilities in POS Codekop v2.0
See all- CVE-2023-36348High
Version 2.0 of POS Codekop has an authenticated remote code execution (RCE) vulnerability via the filename parameter.
- CVE-2023-36346Medium
Version 2.0 of POS Codekop was found to contain a reflected XSS vulnerability via the nm_member parameter in print.php.
- CVE-2023-36345High
A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges.
Original NVD description (English source)
A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.