CVE-2025-11104

A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2025-11104 CodeAstro Electricity Billing System bill.php sql injection

A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2025-11104

CodeAstro Electricity Billing System 1.0 is affected by a SQL injection in /admin/bill.php via manipulation of the uid parameter. The vulnerability is exploitable remotely over a network, with the public exploit referenced in multiple sources. The issue impacts confidentiality, integrity, and ava...

CVE-2025-11104 CodeAstro Electricity Billing System bill.php sql injection

A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CodeAstro Electricity Billing System SQL注入漏洞

CodeAstro Electricity Billing System is an electricity billing system from CodeAstro. CodeAstro Electricity Billing System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter uid in the file /admin/bill.php, which could lead to a SQL...

PT-2025-39772

Name of the Vulnerable Software and Affected Versions CodeAstro Electricity Billing System version 1.0 Description A SQL injection issue exists in CodeAstro Electricity Billing System 1.0. The issue is located in the /admin/bill.php file. Manipulation of the uid argument can lead to SQL injection...

CVE-2025-59814

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database...

CVE-2025-59816

This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue...

Vulnerabilities fixed in Zenitel ICX500 and ICX510 gateway

Zenitel has fixed vulnerabilities in the ICX500 and ICX510 gateway products. The vulnerabilities allow malicious parties to gain unauthorized access to the Billing Admin endpoint and execute arbitrary commands on the device. This can lead to serious compromise of device availability,...

CVE-2025-59814

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database...

CVE-2025-59816

This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue...

CVE-2025-59816 Authenticated Union based SQL-injection in the search input field

This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue...

CVE-2025-59816

CVE-2025-59816 affects Zenitel ICX500/ICX510 Billing Admin endpoint. Affects the Billing Admin component where attackers can query the underlying database directly, potentially retrieving all data including plaintext passwords. Root cause: database query exposure via the Billing Admin interface. ...

CVE-2025-59816 Authenticated Union based SQL-injection in the search input field

This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue...

CVE-2025-59815 Authenticated Remote Code Execution in the Billing Administration portal

This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity...

CVE-2025-59815 Authenticated Remote Code Execution in the Billing Administration portal

This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity...

CVE-2025-59815

CVE-2025-59815 affects Zenitel ICX500 and ICX510 Gateway. The connected sources confirm an authenticated remote code execution in the Billing Administration portal, enabling arbitrary commands with shell access on the underlying system. The impact is device unavailability, and compromised confide...

CVE-2025-59814

CVE-2025-59814 affects Zenitel ICX500/ICX510 Gateway Billing Admin endpoint, enabling unauthorized access to read the Billing Admin database. Multiple connected sources corroborate a vulnerability in the Billing Admin area, with impact described as reading the entire database contents. The NCSC a...

CVE-2025-59814 Unauthenticated SQL-injection in password field

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database...

CVE-2025-59814 Unauthenticated SQL-injection in password field

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database...