CVE-2025-12292: SourceCodester Point of Sales index.php sql injection
A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12292?
CVE-2025-12292 is classified as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-12292?
To fix CVE-2025-12292, sanitize user inputs and utilize prepared statements to prevent SQL injection in the /index.php file.
What systems are affected by CVE-2025-12292?
CVE-2025-12292 affects version 1.0 of SourceCodester Point of Sales software.
Can CVE-2025-12292 be exploited remotely?
Yes, CVE-2025-12292 can be exploited remotely, allowing attackers to manipulate the Username argument for SQL injection.
Is there a public exploit available for CVE-2025-12292?
Yes, there are publicly disclosed exploits for CVE-2025-12292 that detail how to conduct SQL injection attacks.