CVE-2021-2113: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: On Demand Billing. Supported versions that are affected are 2.9.0.0 and 2.9.0.1. Easily exploitable vulnerability allows low privileged attacker with network...

Unspecified Vulnerability in Oracle Financial Services Revenue Management and Billing

Oracle Financial Services Revenue Management and Billing ORMB provides a superior rules-based system for billing, payment and collections that increases revenue opportunities, reduces costs, improves customer service and provides sales channel support. An unspecified vulnerability exists in the O...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Revenue Management and Billing ORMB provides a superior rules-based system for billing, payment and collections that increases revenue opportunities, reduces costs, improves customer service and provides sales channel support. An unspecified vulnerability exists in the O...

File Upload Vulnerability in Lingfeng Certification Billing System of Shenzhen Shuangmeng Technology Co.

Lingfeng authentication billing system is a new generation of RADIUS authentication billing management software developed by Shenzhen Shuangmeng Technology Co. Shenzhen Shuangmeng Technology Co., Ltd. Symphony authentication billing system file upload vulnerability, attackers can use the...

SQL Injection Vulnerability in Synergy Certification Billing System

The business scope of Shenzhen Shuangmeng Technology Co., Ltd. includes: research and development and sales of computer software and hardware; research and development of network technology; technical research and development and sales of electronic and electrical products. There is a SQL injecti...

Awbs Advanced Webhost Billing System Cross-Site Request Forgery Vulnerability

Awbs Advanced Webhost Billing System is a Php-based web billing management system for managed hosting from Awbs USA. The platform provides web hosting and or domain name registration business services, providing an automated solution for web hosting management. A cross-site request forgery...

PT-2021-1735

Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Revenue Management and Billing versions 2.9.0.0 through 2.9.0.1 Description: The issue is related to inadequate access control in the On Demand Billing component, allowing a low-privileged attacker with network acces...

PT-2021-3696

Name of the Vulnerable Software and Affected Versions Issabel PBX version 4 Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited by a remote attacker to execute arbitrary web scripts or HTML. The exploitation occurs through a...

CVE-2020-25950

Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...

CVE-2020-25950

Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...

Cross site request forgery (csrf)

Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...

CVE-2020-25950

Vulnerability summary (CVE-2020-25950) : A CSRF flaw in Advanced Webhost Billing System 3.7.0 can delete a contact via the My Added Contact page. The affected component is the web application logic handling contact management; the root cause is insufficient validation of request origin for state-...

CVE-2020-25950

Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...

Awbs Advanced Webhost Billing System 跨站请求伪造漏洞

Awbs Advanced Webhost Billing System is a Php-based web billing management system for managed hosting from Awbs USA. The platform provides web hosting and or domain name registration business services, providing an automated solution for web hosting management. A cross-site request forgery...

CVE-2020-25950: Cross-Site Request Forgery (CSRF)

Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...

PT-2021-11205

Name of the Vulnerable Software and Affected Versions: Advanced Webhost Billing System version 3.7.0 Description: The issue allows Cross Site Request Forgery CSRF attacks, which can lead to the deletion of a contact from the My Additional Contact page. Recommendations: For Advanced Webhost Billin...

Doppler VDP: User Access Control in Community Plan

Summary: Hello, I have found a logical issue in the Billing Subscription section. A given user is able to maintain User Access Control UAC feature in Community Plan. Steps To Reproduce: Setup two accounts let's say Alice and Bob 1. Login using Alice account and create a workspace with any name sa...

Advanced Webhost Billing System 3.7.0 Cross Site Request Forgery

Exploit Title: Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery CSRF Date: 06/01/2021 Exploit Author: Rahul Ramakant Singh Vendor Homepage: https://www.awbs.com/ Version: 3.7.0 Tested on Windows Steps: 1. Login into the application with the help of email and password. 2. Navigat...

Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery (CSRF)

Exploit Title: Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery CSRF Date: 06/01/2021 Exploit Author: Rahul Ramakant Singh Vendor Homepage: https://www.awbs.com/ Version: 3.7.0 Tested on Windows Steps: 1. Login into the application with the help of email and password. 2. Navigat...

SourceCodester Water Billing System SQL Injection (CVE-2020-28183)

An SQL injection vulnerability exists in SourceCodester Water Billing System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...