CVE-2024-0494

CVE-2024-0494 affects Kashipara Billing Software 1.0, specifically the HTTP POST Request Handler’s material_bill.php. The vulnerability arises from improper handling of the itemtypeid in the POST data, enabling SQL injection that can be triggered remotely. Public exploit information has been disc...

CVE-2024-0494 Kashipara Billing Software HTTP POST Request material_bill.php sql injection

A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown part of the file materialbill.php of the component HTTP POST Request Handler. The manipulation of the argument itemtypeid leads to sql injection. It is possible to initiate the...