CVE-2023-49625: Improper Neutralization of Special Elements used in an SQL Command

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partylisteditsubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-49622: Improper Neutralization of Special Elements used in an SQL Command

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' parameter of the materialbill.php?action=itemRelation resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-49666: Improper Neutralization of Special Elements used in an SQL Command

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmerdetails' parameter of the submitmateriallist.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-49665: Improper Neutralization of Special Elements used in an SQL Command

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity' parameter of the submitdeliverylist.php resource does not validate the characters received and they are sent unfiltered to the database...

PT-2024-13772 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the id parameter of the "partylist edit submit.php" resource does not validate the characters received, and the...

CVE-2023-49658: Improper Neutralization of Special Elements used in an SQL Command

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bankdetails' parameter of the partysubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

PT-2024-13773

Name of the Vulnerable Software and Affected Versions Billing Software version 1.0 Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the buyer address parameter of the "buyer detail submit.php" resource does not validate the characters received,...

PT-2024-13777

Name of the Vulnerable Software and Affected Versions Billing Software version 1.0 Description The issue is related to Unauthenticated SQL Injection vulnerabilities. The quantity parameter of the "submit delivery list.php" resource does not validate the characters received, and they are sent...

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the quantity parameter of the submitdeliverylist.php page is processed without filtering the data and sending it to the database for...

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in the v1.0 version of Kashipara Billing Software, which originates when the bankdetails parameter of the partysubmit.php page is processed without filtering the data and sending it to the...

ASTPP VoIP 4.0.1 - Remote Code Execution

ASTPP VoIP 4.0.1 - Remote Code Execution Exploit Title: ASTPP VoIP 4.0.1 - Remote Code Execution Date: 2019-11-18 Exploit Author: Fabien AUNAY Vendor Homepage: https://www.astppbilling.org/ Software Link: https://github.com/iNextrix/ASTPP/tree/v4.0.1 Version: 4.0.1 vendor default setup script...

ICZ MATCHA INVOICE SQL Injection Vulnerability

ICZ MATCHA INVOICE is a Web-based billing management software from ICZ Japan. A SQL injection vulnerability exists in ICZ MATCHA INVOICE 2.5.6 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

AWBS 2.9.2 (cart.php) Blind SQL Injection Vulnerability

No description provided by source. AWBS 2.9.2 Blind SQL Injection 0day ============================================================================================= Dork....: inurl:/cart?ca=addother&oid= Date....: 01-16-2011 Author..: ShivX Contact.: shivanxatgmaildotcom Vendor..:...

iScripts easybiller 1.1 - SQL Injection

iScripts easybiller 1.1 - SQL Injection Title:iScripts easybiller v1.1 sqli vulnerability Author: Sid3^effects Published: 2010-06-05 price:$147 email:[email protected] vendor: iScripts url : http://www.iscripts.com/easybiller/ google dork : Powered by iScripts EasyBiller ooooo .oooooo. oooooo...

iScripts easybiller v1.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== iScripts easybiller v1.1 SQL Injection Vulnerability ==================================================== Title:iScripts easybiller v1.1 sqli vulnerability Author: Sid3^effects Published:...

Cafe free line, Account Card money own plus-vulnerability warning-the black bar safety net

| Currently, the cafe became a student of the Internet“playful”, whenever school time comes, everyone is like“rush”and ran to the cafe to grab a machine with Internet access, but the long down, the summary is calculated to the Internet overhead, but makes all the students feel bad endless. But th...

Clientexec Billing Software

Clientexec is a php billing software with a target audience of webhosts. By default there is a file called phpinfo.php in the main clientexec directory. This can be access by anyone with a web browser. I looked through the documentation and didn't find any reference to it. I then checked several...