Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page.Referenceshttps://www.abacre.com/retailpointofsale/https://packetstorm.news/files/id/214046/