CVE-2022-41440

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php...

CVE-2022-41440

CVE-2022-41440 affects Billing System Project v1.0, with a SQL injection vulnerability exploitable via the id parameter in /phpinventory/editcategory.php. Multiple connected sources confirm the issue as a SQL injection in that endpoint, but no concrete patch/version update is detailed in the prov...

CVE-2022-41439

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php...

CVE-2022-41439

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php...

CVE-2022-41439

CVE-2022-41439 affects Billing System Project v1.0. A SQL injection vulnerability exists in the id parameter of /phpinventory/edituser.php, exposing confidentiality, integrity, and availability (high impact). Root cause: improper handling of user-supplied id leading to SQLi. Exploitation: a PoC i...

CVE-2022-41437

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

CVE-2022-41437

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

CVE-2022-41437

CVE-2022-41437 affects Billing System Project v1.0. A remote code execution (RCE) vulnerability is exposed through the /php_action/createProduct.php component. The NVD entry cites a network attack vector with low attack complexity and no user interaction, requiring high privileges, and results in...

PT-2022-25870 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The Billing System Project contains a remote code execution RCE issue via the /php action/createProduct.php component. This allows for potential code execution from a remote location...

Billing System Project 代码问题漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. A code issue vulnerability exists in Billing System Project version v1.0, which was discovered to contain a Remote Code Execution RCE vulnerability via component /phpaction/createProduct.php...

PT-2022-25871 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project. The vulnerability is exploitable via the id parameter at the "/phpinventory/edituser.php" API endpoint. This allows for potential...

PT-2022-25872 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project via the id parameter at the "/phpinventory/editcategory.php" API endpoint. This allows for potential exploitation. Recommendations:...

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 has a SQL injection vulnerability that stems from a discovery via the id parameter in /phpinventory/editcategory.php that contains a SQL injection vulnerability...

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual Developer. Billing System Project v1.0 has a SQL injection vulnerability that stems from the id parameter in /phpinventory/edituser.php found to contain a SQL injection vulnerability...

Billing System Project has a remote code execution vulnerability

Billing System Project v1.0 is a billing system program. v1.0 of Billing System Project contains a remote code execution vulnerability that can be exploited by attackers to remotely execute code...

CVE-2022-2429

The Ultimate SMS Notifications for WooCommerce plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.1 via the 'Export Utility' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into billing...

Input validation

The Ultimate SMS Notifications for WooCommerce plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.1 via the 'Export Utility' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into billing...

PT-2022-5124 · WordPress · Ultimate Sms Notifications For Woocommerce

Name of the Vulnerable Software and Affected Versions: Ultimate SMS Notifications for WooCommerce plugin for WordPress versions up to, and including, 1.4.1 Description: The issue is related to a CSV Injection vulnerability in the 'Export Utility' functionality. This allows authenticated attackers...

The vulnerability of the Infrastructure component of the Oracle Communications Billing and Revenue Management software allows a attacker to trigger a service failure.

The vulnerability of the Infrastructure component of the Oracle Communications Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP protocol...

PT-2022-22321 · Tabit · Tabit

Name of the Vulnerable Software and Affected Versions: Tabit affected versions not specified Description: The issue concerns the disclosure of sensitive information through several APIs on the Tabit web system. These APIs display health statements, previous bills, alcohol consumption, and smoking...