CVE-2022-40292 | BDVDB-2026-187571 Detail
PHP Point of SalePHP Point of Sale
Description#
The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each account within the system.
Impact#
CAPEC-70 Try Common or Default Usernames and Passwords
Weaknesses#
- CWE-209 Generation of Error Message Containing Sensitive Information
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.