318 matches found
CVE-2023-3394
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
Code injection
Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...
Session fixation
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3394 Session Fixation in fossbilling/fossbilling
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3394 Session Fixation in fossbilling/fossbilling
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3394
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3394
The CVE-2023-3394 entry describes a Session Fixation flaw in FossBilling (fossbilling/fossbilling) prior to version 0.5.1. The root cause is failing to regenerate the session identifier (PHPSESSID) after user authentication, allowing an attacker to fix a session before login and potentially acces...
CVE-2023-3394 Session Fixation in fossbilling/fossbilling
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3393 Code Injection in fossbilling/fossbilling
Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3393 Code Injection in fossbilling/fossbilling
Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3393
Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...
fossbilling 代码注入漏洞
fossbilling is a free open source solution for efficient billing and customer management. A code injection vulnerability exists in versions prior to fossbilling 0.5.1. An attacker could exploit this vulnerability to perform a code injection attack...
fossbilling 授权问题漏洞
fossbilling is a free open source solution for efficient billing and customer management. An authorization issue vulnerability exists in versions prior to fossbilling 0.5.1 that stems from the presence of session fixing...
CVE-2023-3394: Session Fixation
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
CVE-2023-3393: Improper Control of Generation of Code
Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...
PT-2023-24576
Name of the Vulnerable Software and Affected Versions fossbilling/fossbilling versions prior to 0.5.1 Description The issue concerns a code injection problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incident...
PT-2023-24581
Name of the Vulnerable Software and Affected Versions fossbilling/fossbilling versions prior to 0.5.1 Description The issue concerns a session fixation problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...
WS-2023-0193
An Incorrect Authorization issue was discovered in fossbilling/fossbillin before 0.5.0. Promotions applied to certain client groups are still being honored even after the promotions are no longer applicable to those groups. This means that attackers can potentially gain access to discounted...