CVE-2022-40296
Assigner: TML
Published: 2022-10-31T20:07:56.767774Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: PHP Point of Sale
vendor: PHP Point of Sale LLC
versions: status: affected
version: 19.0
datePublic: 2022-10-28T13:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(254, 254, 254);">The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially including internal and local services, leading to attacks in other downstream systems.</span>


value: 
The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially including internal and local services, leading to attacks in other downstream systems.


impacts: capecId: CAPEC-62
descriptions: value: CAPEC-62 Cross Site Request Forgery
problemTypes: descriptions: cweId: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
type: CWE
source: discovery: EXTERNAL
title: Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
x_generator: engine: Vulnogram 0.1.0-dev