CVE-2026-10237: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manageuser of the component User Management Module. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the atta...

CVE-2026-10236: Improper Authorization

A vulnerability has been found in SourceCodester Water Billing Management System 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save of the component User Management Endpoint. Such manipulation leads to improper authorization. The attack may be launched remotely...

EUVD-2022-52347

Malicious code in bioql PyPI...

CVE-2022-30462

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...

CVE-2022-30462

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...

CVE-2022-30461

Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=deleteclient, id...

Cross site scripting

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...

Sql injection

Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=deleteclient, id...

CVE-2022-30461

Water-billing-management-system v1.0 is vulnerable to SQL Injection via the URL parameter id in /wbms/classes/Master.php?f=delete_client. The CVE entry (CVE-2022-30461) is supported by multiple connected records (nvd, redhat, cnvd, cve.org) describing SQL injection as the issue and the affected c...

CVE-2022-30462

Water-billing-management-system v1.0 is affected by Cross-Site Scripting (XSS) via /wbms/classes/Users.php?f=save, firstname. Connected sources confirm the vulnerability vector affecting the Users.php handler and the firstname parameter, with multiple CVE watches reiterating the same issue. The d...

CVE-2022-30462

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...

Water-billing-management-system 跨站脚本漏洞

Water-billing-management-system is a water billing management system by Carlo Montero Personal Developer. A security vulnerability exists in Water-billing-management-system version 1.0, which originates from a /wbms/classes/Users.php?f=save, firstname stored cross-site scripting XSS attack...

Water-billing-management-system SQL注入漏洞

Water-billing-management-system is a water billing management system. SQL injection vulnerability exists in Water-billing-management-system v1.0. An attacker can exploit this vulnerability to conduct SQL injection attacks via /wbms/classes/Master.php?f=deleteclient...