Vulnerabilities (CVE)

Filtered by vendor Ycf1998 Subscribe
Filtered by product Money-pos
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-63689 1 Ycf1998 1 Money-pos 2026-02-05 N/A 10.0 CRITICAL
Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e59 (2025-09-14) allows a remote attacker to execute arbitrary code via the orderby parameter