396 matches found
CVE-2023-36815 Sealos billing system permission control defect
Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account sealos. io/v1/Payment, resulting in the ability to recharge any amou...
CVE-2023-36815
Sealos (Cloud Operating System) up to version 4.2.0 contains a permission flaw in the billing system that lets a user control the recharge resource account sealos.io/v1/Payment, enabling recharging any amount (1 RMB) and potentially exposing resource information. The vulnerability arises from imp...
GHSA-VPXF-Q44G-W34W Sealos billing system permission control defect
Summary There is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account. sealos. io/v1/Payment, resulting in the ability to recharge any amount of 1 RMB. Details The reason is that sealos is in arrears. Egg pain, we can't create a terminal...
Sealos billing system permission control defect
Summary There is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account. sealos. io/v1/Payment, resulting in the ability to recharge any amount of 1 RMB. Details The reason is that sealos is in arrears. Egg pain, we can't create a terminal...
PT-2023-20839 · Unknown · Sourcecodester Billing Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Billing Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Billing Management System. This issue affects the file editproduct.php of the component GET Parameter Handler. The...
CVE-2023-2595
A vulnerability has been found in SourceCodester Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajaxservice.php of the component POST Parameter Handler. The manipulation of the argument dropservices leads to sql...
PT-2023-20380 · Sourcecodester · Sourcecodester Billing Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Billing Management System version 1.0 Description: A critical issue has been found in the SourceCodester Billing Management System, affecting an unknown functionality of the file ajax service.php of the component POST Parameter...
CVE-2023-27241
SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the lastname text box under the Add Client module...
CVE-2023-27241
SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the lastname text box under the Add Client module...
Cross site scripting
SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the lastname text box under the Add Client module...
CVE-2023-27241
The CVE-2023-27241 entry documents a cross-site scripting (XSS) vulnerability in SourceCodester Water Billing System v1.0, exploitable via the lastname field in the Add Client module. Affected component: Water Billing System (SourceCodester) v1.0; root cause: XSS in user-supplied input in the las...
PT-2023-21024 · Sourcecodester · Sourcecodester Water Billing System
Name of the Vulnerable Software and Affected Versions: SourceCodester Water Billing System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the lastname text box under the Add Client module. Cross-site scripting XSS...
CVE-2023-27241
SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the lastname text box under the Add Client module...
CVE-2023-27241
SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the lastname text box under the Add Client module...
Billing System Project getOrderReport.php SQL Injection Vulnerability
Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the endDate parameter in getOrderReport.php against an externally entered SQL statement. An attacker...
Billing System Project fetchOrderData.php SQL Injection Vulnerability
Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the orderId parameter in fetchOrderData.php against an externally entered SQL statement. An attacker...
Billing System Project printOrder.php SQL Injection Vulnerability
Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the orderId parameter in printOrder.php against an externally entered SQL statement. An attacker cou...
CVE-2022-43213
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php...