Lucene search

K
cvelistMitreCVELIST:CVE-2024-37849
HistoryJun 13, 2024 - 12:00 a.m.

CVE-2024-37849

2024-06-1300:00:00
mitre
www.cve.org
3
sql injection
itsourcecode billing system 1.0
arbitrary code
process.php
username parameter
local attacker

EPSS

0.001

Percentile

48.3%

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter.

EPSS

0.001

Percentile

48.3%

Related for CVELIST:CVE-2024-37849