CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2689 – SourceCodester Billing Management System GET Parameter editproduct.php sql injection
https://notcve.org/view.php?id=CVE-2023-2689
A vulnerability classified as critical was found in SourceCodester Billing Management System 1.0. This vulnerability affects unknown code of the file editproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/niyuchunqiu/cve/blob/main/SQL.md https://vuldb.com/?ctiid.228970 https://vuldb.com/?id.228970 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2595 – SourceCodester Billing Management System POST Parameter ajax_service.php sql injection
https://notcve.org/view.php?id=CVE-2023-2595
A vulnerability has been found in SourceCodester Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajax_service.php of the component POST Parameter Handler. The manipulation of the argument drop_services leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Yastar/bug_report/blob/main/SQLi-1.md https://vuldb.com/?ctiid.228397 https://vuldb.com/?id.228397 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2021-41929
https://notcve.org/view.php?id=CVE-2021-41929
Cross Site Scripting (XSS) in Sourcecodester The Electric Billing Management System 1.0 by oretnom23, allows attackers to execute arbitrary code via the about page. Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Sourcecodester The Electric Billing Management System versión 1.0 by oretnom23, permite a atacantes ejecutar código arbitrario por medio de la página about • https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-19-302021 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •