CVE
CVE-2025-63689
Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e59 (2025-09-14) allows a remote attacker to execute arbitrary code via the order...
Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e59 (2025-09-14) allows a remote attacker to execute arbitrary code via the orderby parameter
Package Versions Affected
Package Version
patch Availability
No items found.
Automatically patch vulnerabilities without upgrading
Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request
CVSS Version
Severity
Base Score
CVSS Version
Score Vector
C
H
U
10
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
C
H
U
0
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
C
H
U
-
Related Resources
No items found.
References
https://gist.github.com/LockeTom/2ed0f3751c88542f48b7c230468d2a46, https://github.com/ycf1998/money-pos/issues/3, https://github.com/ycf1998/money-pos/commit/11f276bd20a41f089298d804e43cb1c39d041e59, https://gist.github.com/LockeTom/2ed0f3751c88542f48b7c230468d2a46, https://github.com/ycf1998/money-pos/issues/3
Basic Information
Ecosystem
