CVE-2022-40292

The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each account within the system.

Score

CVSS 3.1 5.3 Medium

Status

Modified - vdp@themissinglink.com.au

Published

2022-10-31

Last modified

2025-05-06

Weaknesses

CWE-209

Affected products

• Php Point Of Sale (Php Point Of Sale Llc)
• Php Point Of Sale (Phppointofsale)

References

• https://www.themissinglink.com.au/security-advisories/cve-2022-40292