CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3490 SQL Injection in fossbilling/fossbilling

SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3490 SQL Injection in fossbilling/fossbilling

SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3490

CVE-2023-3490 affects fossbilling/fossbilling prior to 0.5.3. The vulnerability is a SQL injection in the KB module’s searchArticles path where the per_page input is used unsafely in getSimpleResultSet, enabling manipulation of the query. NVD/SECURITY docs rate the impact as CRITICAL (CVSS 3.1/3....

fossbilling 代码问题漏洞

fossbilling is a free open source solution for efficient billing and customer management. A code issue vulnerability exists in versions prior to fossbilling 0.5.3 that stems from the unrestricted upload of dangerous types of files...

fossbilling 安全漏洞

fossbilling is a free open source solution for efficient billing and customer management. A security vulnerability exists in fossbilling versions prior to 0.5.3, which stems from improper neutralization of formula elements in CSV files...

CVE-2023-3493: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3491: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3...

PT-2023-25049 · Unknown · Fossbilling

Name of the Vulnerable Software and Affected Versions: fossbilling/fossbilling versions prior to 0.5.3 Description: The issue involves an unrestricted upload of a file with a dangerous type. This can potentially lead to remote code execution RCE in FossBilling. The problem is related to the...

fossbilling SQL注入漏洞

fossbilling is a free open source solution for efficient billing and customer management. A SQL injection vulnerability exists in fossbilling prior to version 0.5.3. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

PT-2023-25048 · Unknown · Fossbilling

Name of the Vulnerable Software and Affected Versions: fossbilling/fossbilling versions prior to 0.5.3 Description: The issue is related to SQL Injection in the GitHub repository fossbilling/fossbilling. Recommendations: For versions prior to 0.5.3, update to version 0.5.3 or later to resolve the...

PT-2023-25058 · Unknown · Fossbilling

Name of the Vulnerable Software and Affected Versions: fossbilling/fossbilling versions prior to 0.5.3 Description: The issue concerns improper neutralization of formula elements in a CSV file. This problem affects the GitHub repository fossbilling/fossbilling. Recommendations: For versions prior...

CVE-2023-3490: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3394

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

Session fixation

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

Code injection

Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3394 Session Fixation in fossbilling/fossbilling

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3394 Session Fixation in fossbilling/fossbilling

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3394 Session Fixation in fossbilling/fossbilling

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3394

The CVE-2023-3394 entry describes a Session Fixation flaw in FossBilling (fossbilling/fossbilling) prior to version 0.5.1. The root cause is failing to regenerate the session identifier (PHPSESSID) after user authentication, allowing an attacker to fix a session before login and potentially acces...