CVE-2025-52026
Published Jan 23, 2026An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint re…
Vendor/product archive
aptsys / gemscms_backend CVEs
Beta · best-effort5 CVEs tagged to aptsys / gemscms_backend — 2 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2025-52025
Published Jan 23, 2026An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28. The vulnerability arises because user in…
CVE-2025-52024
Published Jan 23, 2026A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By accessing specific URL…
CVE-2025-52023
Published Jan 23, 2026A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file…
CVE-2025-52022
Published Jan 23, 2026A vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal f…
Showing 1-5 of 5 CVEsPage 1 of 1