CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-7913 – itsourcecode Billing System addclient1.php sql injection
https://notcve.org/view.php?id=CVE-2024-7913
A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument lname/fname/mi/address/contact/meterReader leads to sql injection. The attack may be initiated remotely. • https://github.com/ppp-src/a/issues/4 https://vuldb.com/?ctiid.275039 https://vuldb.com/?id.275039 https://vuldb.com/?submit.391841 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-7839 – itsourcecode Billing System addbill.php sql injection
https://notcve.org/view.php?id=CVE-2024-7839
A vulnerability classified as critical has been found in itsourcecode Billing System 1.0. This affects an unknown part of the file addbill.php. The manipulation of the argument owners_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://vuldb.com/?id.274743 https://vuldb.com/?ctiid.274743 https://vuldb.com/?submit.391531 https://github.com/ppp-src/a/issues/2 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-49666 – Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
https://notcve.org/view.php?id=CVE-2023-49666
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmer_details' parameter of the submit_material_list.php resource does not validate the characters received and they are sent unfiltered to the database. Billing Software v1.0 es afectado por múltiples vulnerabilidades de inyección SQL no autenticada. El parámetro 'custmer_details' del recurso submit_material_list.php no valida los caracteres recibidos y se envían sin filtrar a la base de datos. • https://fluidattacks.com/advisories/zimerman https://www.kashipara.com • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-43214
https://notcve.org/view.php?id=CVE-2022-43214
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php. Se descubrió que Billing System Project v1.0 contenía una vulnerabilidad de inyección SQL a través del parámetro orderId en printOrder.php. • https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43214%28sql%20in%20printOrder.php%29.md https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-43215
https://notcve.org/view.php?id=CVE-2022-43215
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php. Se descubrió que Billing System Project v1.0 contenía una vulnerabilidad de inyección SQL a través del parámetro endDate en getOrderReport.php. • https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43215%28sql%20in%20getOrderReport.php%29.md https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •