Lucene search
China National Vulnerability DatabaseCNVD-2022-86304HistoryNov 24, 2022 - 12:00 a.m.
Billing System Project fetchOrderData.php SQL Injection Vulnerability
2022-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
billing system
sql injection
fetchorderdata.php
validation
external input
orderid parameter
sensitive database information
0.002 Low
EPSS
Percentile
52.3%
Billing System Project is a billing system project from the personal developer Mayuri K. A SQL injection vulnerability exists in Billing System Project v1.0, which stems from a lack of validation of external input SQL statements in the orderId parameter of fetchOrderData.php. An attacker could use this vulnerability to obtain sensitive database information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| billing system project billing systemv | eq | 1.0 |
Related
cve
cve
CVE-2022-43212
2022-11-22 18:15:10
nvd
nvd
CVE-2022-43212
2022-11-22 18:15:10
cvelist
cvelist
CVE-2022-43212
2022-11-22 00:00:00
prion
prion
Sql injection
2022-11-22 18:15:00