CVE-2025-12294 | SourceCodester Point of Sales 1.0 /delete_category.php ID sql injection

October 26, 2025 Yanac

A vulnerability identified as critical has been detected in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /delete_category.php. Performing manipulation of the argument ID results in sql injection.

This vulnerability is identified as CVE-2025-12294. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More