# CVE-2025-67261 - Content-based blind SQL injection on Abacre Retail Point of Sale 14.0.0.396
Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page.
The "Search" function under the "Orders" page is vulnerable to Content-based Blind SQL Injection.
A simple payload will give us the initial confirmation, then, using the query below we can confirm that the "Client" table exist in the Firebird database file.
```SQL
') OR EXISTS(SELECT 1 FROM Client)--
```
When executing, we do receive content. To confirm this even further, we can go to the "Clients" tab and trigger a SQL error, which will give us the name of the table.
Within the same tab, we confirm that we have 4 clients registered in the database.
However, we can also search for it in our vulnerable parameter. If we search for only 3 entries, nothing is returned back.
```SQL
') OR (SELECT COUNT(*) FROM Client)=3--
```
But when searching for 4, we now get a true result.
