Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/11/04 7:5 a.m.10 views

CVE-2025-12617

A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/logincrud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use...

9.8CVSS7.2AI score0.0038EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:3 a.m.3 views

CVE-2024-37849

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...

9.8CVSS6.2AI score0.00726EPSS
Exploits1References1
NVD
NVD
added 2024/08/18 10:15 p.m.15 views

CVE-2024-7913

A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument lname/fname/mi/address/contact/meterReader leads to sql injection. The attack may be initiated...

9.8CVSS0.00582EPSS
Exploits1References4
CVE
CVE
added 2024/08/18 10:0 p.m.52 views

CVE-2024-7913

The CVE-2024-7913 entry affects itsourcecode Billing System 1.0, with a SQL injection in /addclient1.php triggered by manipulating lname, fname, mi, address, contact, or meterReader. Root cause is unsafely constructed inputs leading to injection; attack can be remote and the exploit has been disc...

9.8CVSS7.5AI score0.00582EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2024/08/15 9:0 p.m.63 views

CVE-2024-7839

CVE-2024-7839 affects itsourcecode Billing System 1.0, with a vulnerability in the file addbill.php where the argument owners_id can be manipulated to cause SQL injection. The issue is exploitable remotely and exploits have been disclosed publicly. Connected documents consistently describe this a...

9.8CVSS7.5AI score0.00621EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/06/13 12:0 a.m.14 views

CVE-2024-37849

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...

0.00726EPSS
Exploits1References1
CVE
CVE
added 2023/12/25 1:31 a.m.51 views

CVE-2023-7097

The CVE-2023-7097 entry concerns code-projects Water Billing System 1.0, with a vulnerability in the /addbill.php file. The underlying flaw is SQL injection triggered by manipulating the owners_id parameter, enabling remote exploitation. Multiple connected sources confirm the issue, its remote ex...

9.8CVSS7.4AI score0.00649EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/25 1:31 a.m.8 views

CVE-2023-7097 code-projects Water Billing System addbill.php sql injection

A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown part of the file /addbill.php. The manipulation of the argument ownersid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

6.5CVSS7.4AI score0.00649EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.3 views

PT-2023-20380 · Sourcecodester · Sourcecodester Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Billing Management System version 1.0 Description: A critical issue has been found in the SourceCodester Billing Management System, affecting an unknown functionality of the file ajax service.php of the component POST Parameter...

9.8CVSS7.6AI score0.00827EPSS
Exploits1References5
Prion
Prion
added 2020/11/17 11:15 p.m.18 views

Sql injection

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to process.php...

10CVSS9.8AI score0.02525EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder