EUVD-2023-43906

Malicious code in bioql PyPI...

EUVD-2023-44060

Malicious code in bioql PyPI...

CVE-2023-4005

Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5...

CVE-2023-3394

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3393

Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3229

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3230

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3521

Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...

CVE-2023-3491

Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3228

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3227

Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-4005

Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5...

CVE-2023-4005

CVE-2023-4005 affects fossbilling/fossbilling prior to 0.5.5. The vulnerability is described as Insufficient Session Expiration, with impact implied on confidentiality, integrity, and availability (high in NVD metrics). Root cause: insufficient session expiration time; some sessions may remain va...

fossbilling 代码问题漏洞

fossbilling is a free open source solution for efficient billing and customer management. A code issue vulnerability exists in versions prior to fossbilling 0.5.5 that stems from the presence of an insufficient session expiration time...

CVE-2023-3521

Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...

CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling

Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...

CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling

Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...

fossbilling 跨站脚本漏洞

fossbilling is a free open source solution for efficient billing and customer management. A cross-site scripting vulnerability exists in versions prior to fossbilling 0.5.4, which stems from the presence of a reflected cross-site scripting vulnerability...

Fossbilling is Vulnerable to HTML Injection During the Generation of Invoices, Which Leads To An Open Redirect Vulnerability.

Description FOSSBilling suffers from a lack of sanitization in the handling of admin input values. This issue manifests when clients attempt to generate invoices for their orders. Specifically, in the PDF generation of invoices, the company name, editable through the admin portal, is included. An...

Reflected XSS in date

Description There is a reflective XSS on the FOSSBilling admin screen. Proof of Concept By accessing the following URL, it is possible to execute any script on the browser of the logged-in administrator user. URL:...