Aptsys

Gemscms Backend

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2025-52022

  • EPSS 0.04%
  • Veröffentlicht 23.01.2026 00:00:00
  • Zuletzt bearbeitet 11.02.2026 19:25:31

A vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This occurs when specially ...

5.3

CVE-2025-52023

  • EPSS 0.05%
  • Veröffentlicht 23.01.2026 00:00:00
  • Zuletzt bearbeitet 11.02.2026 19:24:45

A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This occurs when specially craf...

9.4

CVE-2025-52024

  • EPSS 0.05%
  • Veröffentlicht 23.01.2026 00:00:00
  • Zuletzt bearbeitet 11.02.2026 19:23:51

A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By accessing specific URLs, an attacker is presented with a directory-style index listing all av...

9.4

CVE-2025-52025

  • EPSS 0.02%
  • Veröffentlicht 23.01.2026 00:00:00
  • Zuletzt bearbeitet 11.02.2026 19:24:10

An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28. The vulnerability arises because user input is directly inserted into a dynamic SQL query syntax without proper...

7.5

CVE-2025-52026

  • EPSS 0.01%
  • Veröffentlicht 23.01.2026 00:00:00
  • Zuletzt bearbeitet 12.02.2026 16:48:21

An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint returns a list of cashier accounts, including names, email addresses, use...