Lucene search
+L

396 matches found

CVE
CVE
added 2022/09/30 2:4 p.m.58 views

CVE-2022-41437

CVE-2022-41437 affects Billing System Project v1.0. A remote code execution (RCE) vulnerability is exposed through the /php_action/createProduct.php component. The NVD entry cites a network attack vector with low attack complexity and no user interaction, requiring high privileges, and results in...

7.2CVSS7.4AI score0.01378EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/30 2:4 p.m.10 views

CVE-2022-41437

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

7.5AI score0.01378EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/09/30 12:0 a.m.11 views

PT-2022-25872 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project via the id parameter at the "/phpinventory/editcategory.php" API endpoint. This allows for potential exploitation. Recommendations:...

7.2CVSS7.2AI score0.00734EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.7 views

Billing System Project 代码问题漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. A code issue vulnerability exists in Billing System Project version v1.0, which was discovered to contain a Remote Code Execution RCE vulnerability via component /phpaction/createProduct.php...

7.2CVSS7.3AI score0.01378EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/09/30 12:0 a.m.9 views

PT-2022-25871 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project. The vulnerability is exploitable via the id parameter at the "/phpinventory/edituser.php" API endpoint. This allows for potential...

7.2CVSS7.2AI score0.00734EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/09/30 12:0 a.m.7 views

PT-2022-25870 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The Billing System Project contains a remote code execution RCE issue via the /php action/createProduct.php component. This allows for potential code execution from a remote location...

7.2CVSS7.3AI score0.01378EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.7 views

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual Developer. Billing System Project v1.0 has a SQL injection vulnerability that stems from the id parameter in /phpinventory/edituser.php found to contain a SQL injection vulnerability...

7.2CVSS7.2AI score0.00734EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.7 views

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 has a SQL injection vulnerability that stems from a discovery via the id parameter in /phpinventory/editcategory.php that contains a SQL injection vulnerability...

7.2CVSS7.3AI score0.00734EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/09/22 12:0 a.m.6 views

Billing System Project has a remote code execution vulnerability

Billing System Project v1.0 is a billing system program. v1.0 of Billing System Project contains a remote code execution vulnerability that can be exploited by attackers to remotely execute code...

5.8AI score
SaveExploits0Affected Software1
NVD
NVD
added 2022/08/12 8:15 p.m.17 views

CVE-2022-2801

A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associat...

9.8CVSS0.00549EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/12 8:15 p.m.20 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associat...

7.5CVSS9.7AI score0.00549EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/08/12 7:45 p.m.28 views

CVE-2022-2801 SourceCodester Automated Beer Parlour Billing System Login sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associat...

6.3CVSS10AI score0.00549EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/12 7:45 p.m.50 views

CVE-2022-2801

CVE-2022-2801 affects SourceCodester Automated Beer Parlour Billing System (Login component). The vulnerability arises from input manipulation of the username parameter, enabling SQL injection that can be triggered remotely. Affected details across sources indicate an exploitable SQL injection in...

9.8CVSS8.3AI score0.00549EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2022/07/25 12:0 a.m.11 views

Billing System Arbitrary Code Execution Vulnerability

Billing System is an easy-to-use billing system. An arbitrary code execution vulnerability exists in Billing System, which can be exploited by an attacker to gain control of the server...

8.1AI score
SaveExploits0
CNVD
CNVD
added 2022/05/25 12:0 a.m.28 views

Water-billing-management-system SQL注入漏洞

Water-billing-management-system is a water billing management system. SQL injection vulnerability exists in Water-billing-management-system v1.0. An attacker can exploit this vulnerability to conduct SQL injection attacks via /wbms/classes/Master.php?f=deleteclient...

9.8CVSS4.2AI score0.01048EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/24 2:15 p.m.4 views

CVE-2022-30462

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...

5.4CVSS6.1AI score0.00481EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/24 2:15 p.m.5 views

CVE-2022-30461

Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=deleteclient, id...

9.8CVSS7.4AI score0.01048EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/24 2:15 p.m.6 views

CVE-2022-30461

Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=deleteclient, id...

9.8CVSS7.4AI score0.01048EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/24 2:15 p.m.4 views

CVE-2022-30462

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...

5.4CVSS6.1AI score0.00481EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/24 6:15 p.m.4 views

CVE-2021-41929

Cross Site Scripting XSS in Sourcecodester The Electric Billing Management System 1.0 by oretnom23, allows attackers to execute arbitrary code via the about page...

6.1CVSS6.6AI score0.01008EPSS
SaveExploits1References1
Rows per page
Query Builder