CVE-2019-25299: Rimbalinux Ahadpos

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

RimbaLinux AhadPOS 1.11 contains a SQL injection vulnerability in the 'alamatCustomer' parameter that allows attackers to manipulate database queries through crafted POST requests. Attackers can exploit time-based and boolean-based blind SQL injection techniques to extract information or potentially interact with the underlying database.

Affected products

• Rimbalinux Ahadpos: version 1.11 only

Published 2026-02-06. Last modified 2026-06-17.