318 matches found
CVE-2023-3521
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
CVE-2023-3491
Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3...
CVE-2023-3228
Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...
CVE-2023-3227
Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0...
CVE-2023-4005
Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5...
CVE-2023-4005
Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5...
CVE-2023-4005
CVE-2023-4005 affects fossbilling/fossbilling prior to 0.5.5. The vulnerability is described as Insufficient Session Expiration, with impact implied on confidentiality, integrity, and availability (high in NVD metrics). Root cause: insufficient session expiration time; some sessions may remain va...
CVE-2023-4005: Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5...
fossbilling 代码问题漏洞
fossbilling is a free open source solution for efficient billing and customer management. A code issue vulnerability exists in versions prior to fossbilling 0.5.5 that stems from the presence of an insufficient session expiration time...
PT-2023-27236
Name of the Vulnerable Software and Affected Versions fossbilling/fossbilling versions prior to 0.5.5 Description The issue is related to insufficient session expiration in the GitHub repository fossbilling/fossbilling. Recommendations For versions prior to 0.5.5, update to version 0.5.5 or later...
CVE-2023-3521
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
CVE-2023-3521
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
fossbilling 跨站脚本漏洞
fossbilling is a free open source solution for efficient billing and customer management. A cross-site scripting vulnerability exists in versions prior to fossbilling 0.5.4, which stems from the presence of a reflected cross-site scripting vulnerability...
PT-2023-25194
Name of the Vulnerable Software and Affected Versions fossbilling versions prior to 0.5.4 Description The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository fossbilling/fossbilling. This type of attack occurs when an application includes user input in its responses...
CVE-2023-3521: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
Fossbilling is Vulnerable to HTML Injection During the Generation of Invoices, Which Leads To An Open Redirect Vulnerability.
Description FOSSBilling suffers from a lack of sanitization in the handling of admin input values. This issue manifests when clients attempt to generate invoices for their orders. Specifically, in the PDF generation of invoices, the company name, editable through the admin portal, is included. An...
Reflected XSS in date
Description There is a reflective XSS on the FOSSBilling admin screen. Proof of Concept By accessing the following URL, it is possible to execute any script on the browser of the logged-in administrator user. URL:...