CVE-2019-25299

Published February 6th, 2026

View on NVD ↗

CVSS v3

7.1

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

RimbaLinux AhadPOS 1.11 contains a SQL injection vulnerability in the 'alamatCustomer' parameter that allows attackers to manipulate database queries through crafted POST requests. Attackers can exploit time-based and boolean-based blind SQL injection techniques to extract information or potentially interact with the underlying database.

rimbalinux/AhadPOS

Web-based POS (Point Of Sale) software with Open Source (GPL v2) license. Based on PHP5 & MySQL5

GitHub