Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86305
HistoryNov 24, 2022 - 12:00 a.m.

Billing System Project getOrderReport.php SQL Injection Vulnerability

2022-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
sql injection
billing system project
vulnerability
getorderreport.php
mayuri k
validation
enddate parameter
sensitive database information
cnvd

EPSS

0.002

Percentile

52.2%

Billing System Project is a billing system project from the personal developer Mayuri K. A SQL injection vulnerability exists in Billing System Project v1.0, which stems from a lack of validation of externally entered SQL statements in the endDate parameter of getOrderReport.php. An attacker could use this vulnerability to obtain sensitive database information.

EPSS

0.002

Percentile

52.2%

Related for CNVD-2022-86305