Lucene search
+L

1911 matches found

Vulnrichment
Vulnrichment
added 2024/01/04 1:50 p.m.5 views

CVE-2023-49622 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' parameter of the materialbill.php?action=itemRelation resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00672EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.13 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the buyeraddress parameter of the buyerdetailsubmit.php page is processed without filtering the data and sending it to the database for...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.18 views

PT-2024-13772 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the id parameter of the "partylist edit submit.php" resource does not validate the characters received, and the...

9.8CVSS9.8AI score0.00672EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.13 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A security vulnerability exists in the v1.0 version of Kashipara Billing Software, which stems from the unfiltered processing of the cancelid parameter on the materialbill.php page before sending the data to the database for...

9.8CVSS6.8AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.16 views

PT-2024-13771 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue is related to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter of the "material bill.php" resource does not validate the characters received and they are sent...

9.8CVSS9.6AI score0.00672EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.11 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in the v1.0 version of Kashipara Billing Software, which originates when the custmerdetails parameter of the submitmateriallist.php page is processed without filtering the data and sending it t...

9.8CVSS7.9AI score0.00746EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.11 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the id parameter of the partylisteditsubmit.php page is processed without filtering the data and sending it to the database for...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.10 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the itemnameid parameter of the materialbill.php?action=itemRelation page is processed without filtering the data and sent to the...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.11 views

PT-2024-13774 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue is related to multiple Unauthenticated SQL Injection vulnerabilities. The customer details parameter of the "buyer invoice submit.php" resource does not validate the characters received, and...

9.8CVSS9.6AI score0.00672EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.13 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the customerdetails parameter of the buyerinvoicesubmit.php page is processed without filtering the data and sending it to the database...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.18 views

PT-2024-13776 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the bank details parameter of the "party submit.php" resource does not validate the characters received, and th...

9.8CVSS9.9AI score0.00672EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.15 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in the v1.0 version of Kashipara Billing Software, which originates when the bankdetails parameter of the partysubmit.php page is processed without filtering the data and sending it to the...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.11 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the quantity parameter of the submitdeliverylist.php page is processed without filtering the data and sending it to the database for...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.15 views

PT-2024-13778

Name of the Vulnerable Software and Affected Versions Billing Software version 1.0 Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the custmer details parameter of the "submit material list.php" resource does not validate the characters receive...

9.8CVSS9.8AI score0.00746EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.14 views

PT-2024-13770 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue affects the material bill.php?action=itemRelation resource, where the itemnameid parameter does not validate the characters received, sending them unfiltered to the database. This leads to...

9.8CVSS9.6AI score0.00672EPSS
SaveExploits1References5
PyPA
PyPA
added 2023/12/29 5:16 p.m.14 views

PYSEC-2023-271

Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect OIDC email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change...

5.3CVSS6.7AI score0.00367EPSS
SaveExploits0References1Affected Software1
Citrix
Citrix
added 2023/12/27 12:00 a.m.19 views

The status of VDA machine was "Stopped" instead of "Stopped (Deallocated)" on Azure Portal

The following behavior was confirmed for dedicated machines created using Azure on-demand provisioning. - If shutdown the target VM within the OS, the status will be "Stopped" on Azure Portal. If it is "stopped", it will be subject to Azure pay-as-you-go billing. - If the target VM is from the...

7AI score
SaveExploits0
OSV
OSV
added 2023/12/25 2:15 a.m.8 views

CVE-2023-7097

A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown part of the file /addbill.php. The manipulation of the argument ownersid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

9.8CVSS5.7AI score0.00649EPSS
SaveExploits1References3
NVD
NVD
added 2023/12/25 2:15 a.m.26 views

CVE-2023-7097

A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown part of the file /addbill.php. The manipulation of the argument ownersid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

9.8CVSS0.00649EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/25 2:15 a.m.24 views

Sql injection

A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown part of the file /addbill.php. The manipulation of the argument ownersid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

6.5CVSS7.7AI score0.00649EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder