Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By accessing specific URLs, an attacker is presented with a directory-style index listing all available backend services and POS web services, each with an HTML form for submitting test input. These panels are intended for developer use, but are accessible in production environments with no authentication or session validation. This grants any external actor the ability to discover, test, and execute API endpoints that perform critical functions including but not limited to user transaction retrieval, credit adjustments, POS actions, and internal data queries.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Aptsys gemscms POS Platform 安全漏洞
Vulnerability Description
Aptsys gemscms POS Platform是印度Aptsys公司的一个餐饮管理系统。 Aptsys gemscms POS Platform存在安全漏洞，该漏洞源于内部API测试工具暴露给未经验证的用户，可能导致发现、测试和执行关键API端点。
CVSS Information
N/A
Vulnerability Type
N/A