44 matches found
CVE-2022-3552
CVE-2022-3552 In order to exploit the vulnerability in BoxBlilling, the version will have to be: "BoxBilling=4.22.1.5" and you will have to have valid admin credentials. If you have the situation above, here are the steps you have to take in order to get the juicy RCE: Create a python virtual...
CVE-2022-3552
CVE-2022-3552 BoxBilling=4.22.1.5 - Remote Code Execution RCE Usages python3 .\CVE-2022-3552.py -d http://192.168.228.143 -u [email protected] -p [email protected]...
EUVD-2020-16390
Malware in sbrugna...
CVE-2020-23647
Cross Site Scripting XSS vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form...
BoxBilling 4.22.1.5 Remote Code Execution
BoxBilling versions 4.22.1.5 and below remote code execution exploit that spawns a php reverse shell...
Exploit for Unrestricted Upload of File with Dangerous Type in Boxbilling
CVE-2022-3552 In order to exploit the vulnerability in BoxBli...
CVE-2022-3552
Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1...
BoxBilling Cross-Site Scripting Vulnerability
BoxBilling is open source billing and customer management software for BoxBilling individual developers. A cross-site scripting vulnerability exists in BoxBilling versions 4.19,4.19.1,4.20,4.21, which stems from arbitrary code that can be run via a form for submitting a new ticket. An attacker ca...
CVE-2020-23647
Cross Site Scripting XSS vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form...
CVE-2020-23647
Cross Site Scripting XSS vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form...
Cross site scripting
Cross Site Scripting XSS vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form...
CVE-2020-23647
Cross Site Scripting XSS vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form...
BoxBilling 跨站脚本漏洞
BoxBilling is open source billing and customer management software for BoxBilling individual developers. A cross-site scripting vulnerability exists in BoxBilling versions 4.19,4.19.1,4.20,4.21, which stems from arbitrary code that can be run via a form for submitting a new ticket. An attacker ca...
CVE-2020-23647: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form...
CVE-2020-23647
CVE-2020-23647 is a documented XSS vulnerability affecting BoxBilling versions 4.19, 4.19.1, 4.20, and 4.21. The issue arises from the message field on the “submit new ticket” form, allowing remote attackers to execute arbitrary code in some contexts. The available connected sources consistently ...
PT-2023-11652 · Unknown · Boxbilling
Name of the Vulnerable Software and Affected Versions: BoxBilling versions 4.19 through 4.21 Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the message field on the submit new ticket form. This enables attackers to execute malicious scripts,...
CVE-2020-23647
Cross Site Scripting XSS vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form...
Exploit for Unrestricted Upload of File with Dangerous Type in Boxbilling
CVE-2022-3552 BoxBilling=4.22.1.5 - R...
