Aptsys - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2026-01-23.

Products

CVE-2025-52024 - CVSS 9.4 (critical), 2026-01-23: A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By…
CVE-2025-52023 - CVSS 5.3 (medium), 2026-01-23: A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that…
CVE-2025-52026 - CVSS 7.5 (high), 2026-01-23: An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This…
CVE-2025-52025 - CVSS 9.4 (critical), 2026-01-23: An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28. The vulnerability…
CVE-2025-52022 - CVSS 5.3 (medium), 2026-01-23: A vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages…