← All advisories

Critical severity9.8NVD Advisory· Published Dec 2, 2020· Updated Jun 17, 2026

CVE-2020-29285

CVE-2020-29285

Description

SQL injection vulnerability was discovered in Point of Sales in PHP/PDO 1.0, which can be exploited via the id parameter to edit_category.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Point Of Sales In Php\/pdo Project/Point Of Sales In Php\/pdo
cpe:2.3:a:point_of_sales_in_php\/pdo_project:point_of_sales_in_php\/pdo:1.0:*:*:*:*:*:*:*
Point of Sales in PHP/PDO/Point of Sales in PHP/PDOdescription
Point Of Sales/Point of Salesllm-create
Range: 1.0

Patches

Vulnerability mechanics

References

3

github.com/BigTiger2020/Point-of-Sales/blob/main/README.mdnvdExploitThird Party Advisory
www.sourcecodester.com/php/14540/point-sales-phppdo-full-source-code-2020.htmlnvdProductThird Party Advisory
projectworlds.in/free-projects/php-projects/online-doctor-appointment-booking-system-php-and-mysqlnvdNot Applicable

News mentions

0

No linked articles in our index yet.