title: Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
description:
The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the compromise of plaintext passwords via offline attacks.
problem types: CWE-916 Use of Password Hash With Insufficient Computational Effort
affected:
{
defaultStatus: unaffected
product: PHP Point of Sale
vendor: PHP Point of Sale LLC
versions:
status: affected, version: 19.0
}