Back to Database
Status published
Unknown
CVE-2022-40293
Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
Vulnerability Description
The application was vulnerable to a session fixation that could be used hijack accounts.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40293
Credits & Attribution
No credits recorded in the NVD database.
More from PHP Point of Sale LLC
View All →CVE-2022-40296
Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
Unknown
0
CVE-2022-40295
Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
Medium
4.9
CVE-2022-40294
CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC
Unknown
0
CVE-2022-40292
Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
Unknown
0
CVE-2022-40291
Cross-site request forgery (CSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC
Unknown
0
Affected Vendor
PHP Point of Sale LLC
View all reports →Affected Software
PHP Point of Sale
Vulnerable Versions:
0
Timeline
Official Publish:
October 31st, 2022
Last Modified:
May 6th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available