CVE-2025-11104 CodeAstro Electricity Billing System bill.php sql injection

A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2025-11104 CodeAstro Electricity Billing System bill.php sql injection

A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2025-11104

CodeAstro Electricity Billing System 1.0 is affected by a SQL injection in /admin/bill.php via manipulation of the uid parameter. The vulnerability is exploitable remotely over a network, with the public exploit referenced in multiple sources. The issue impacts confidentiality, integrity, and ava...

PT-2025-39772

Name of the Vulnerable Software and Affected Versions CodeAstro Electricity Billing System version 1.0 Description A SQL injection issue exists in CodeAstro Electricity Billing System 1.0. The issue is located in the /admin/bill.php file. Manipulation of the uid argument can lead to SQL injection...

CodeAstro Electricity Billing System SQL注入漏洞

CodeAstro Electricity Billing System is an electricity billing system from CodeAstro. CodeAstro Electricity Billing System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter uid in the file /admin/bill.php, which could lead to a SQL...

CVE-2025-11104: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

Exploit for OS Command Injection in Magnussolution Magnusbilling

This is a PoC exploit for CVE-2023-30258, an exploit targeting t...

CVE-2025-9706

A security vulnerability has been detected in SourceCodester Water Billing System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

CVE-2025-9701

A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. The impacted element is an unknown function of the file /receipt.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed...

CVE-2025-9739

The CVE-2025-9739 entry concerns Campcodes Online Water Billing System 1.0. Affected is functionality in /process.php where manipulating the Username parameter enables SQL injection. The vulnerability is exploitable remotely and exploitation/public disclosure is noted across multiple sources. Roo...

CVE-2025-9739: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Online Water Billing System 1.0. Affected by this issue is some unknown functionality of the file /process.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-9706 SourceCodester Water Billing System edit.php sql injection

A security vulnerability has been detected in SourceCodester Water Billing System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

CVE-2025-9705 SourceCodester Water Billing System paybill.php sql injection

A weakness has been identified in SourceCodester Water Billing System 1.0. Affected is an unknown function of the file /paybill.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and coul...

CVE-2025-9704

A security flaw has been discovered in SourceCodester Water Billing System 1.0. This impacts an unknown function of the file /viewbill.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be...

CVE-2025-9704

CVE-2025-9704 affects SourceCodester Water Billing System 1.0. A SQL injection occurs via the ID parameter in /viewbill.php, enabling remote exploitation as described in multiple sources. The vulnerability stems from improper handling of the ID argument, leading to potential data exposure or modi...

CVE-2025-9704 SourceCodester Water Billing System viewbill.php sql injection

A security flaw has been discovered in SourceCodester Water Billing System 1.0. This impacts an unknown function of the file /viewbill.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be...

CVE-2025-9702 SourceCodester Simple Cafe Billing System sales_report.php sql injection

A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /salesreport.php. The manipulation of the argument month leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

CVE-2025-9702 SourceCodester Simple Cafe Billing System sales_report.php sql injection

A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /salesreport.php. The manipulation of the argument month leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

CVE-2025-9701

A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. The impacted element is an unknown function of the file /receipt.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed...

CVE-2025-9701

CVE-2025-9701 affects SourceCodester Simple Cafe Billing System 1.0. The vulnerability is a SQL injection in the file /receipt.php, caused by manipulation of the ID parameter, enabling remote exploitation. Multiple linked sources (NVD, Red Hat, CVE lists, and security notes) confirm remote attack...