218 matches found
Fossbilling is Vulnerable to HTML Injection During the Generation of Invoices, Which Leads To An Open Redirect Vulnerability.
Description FOSSBilling suffers from a lack of sanitization in the handling of admin input values. This issue manifests when clients attempt to generate invoices for their orders. Specifically, in the PDF generation of invoices, the company name, editable through the admin portal, is included. An...
Reflected XSS in date
Description There is a reflective XSS on the FOSSBilling admin screen. Proof of Concept By accessing the following URL, it is possible to execute any script on the browser of the logged-in administrator user. URL:...
CVE-2023-3490
SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3...
CVE-2023-3493
Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...
CVE-2023-3491
Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3...
CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling
Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...
CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling
Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...
CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling
Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...
CVE-2023-3490 SQL Injection in fossbilling/fossbilling
SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3...
CVE-2023-3490 SQL Injection in fossbilling/fossbilling
SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3...
CVE-2023-3490
CVE-2023-3490 affects fossbilling/fossbilling prior to 0.5.3. The vulnerability is a SQL injection in the KB module’s searchArticles path where the per_page input is used unsafely in getSimpleResultSet, enabling manipulation of the query. NVD/SECURITY docs rate the impact as CRITICAL (CVSS 3.1/3....
fossbilling 代码问题漏洞
fossbilling is a free open source solution for efficient billing and customer management. A code issue vulnerability exists in versions prior to fossbilling 0.5.3 that stems from the unrestricted upload of dangerous types of files...
fossbilling 安全漏洞
fossbilling is a free open source solution for efficient billing and customer management. A security vulnerability exists in fossbilling versions prior to 0.5.3, which stems from improper neutralization of formula elements in CSV files...
PT-2023-25049 · Unknown · Fossbilling
Name of the Vulnerable Software and Affected Versions: fossbilling/fossbilling versions prior to 0.5.3 Description: The issue involves an unrestricted upload of a file with a dangerous type. This can potentially lead to remote code execution RCE in FossBilling. The problem is related to the...
PT-2023-25058 · Unknown · Fossbilling
Name of the Vulnerable Software and Affected Versions: fossbilling/fossbilling versions prior to 0.5.3 Description: The issue concerns improper neutralization of formula elements in a CSV file. This problem affects the GitHub repository fossbilling/fossbilling. Recommendations: For versions prior...
fossbilling SQL注入漏洞
fossbilling is a free open source solution for efficient billing and customer management. A SQL injection vulnerability exists in fossbilling prior to version 0.5.3. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...
PT-2023-25048 · Unknown · Fossbilling
Name of the Vulnerable Software and Affected Versions: fossbilling/fossbilling versions prior to 0.5.3 Description: The issue is related to SQL Injection in the GitHub repository fossbilling/fossbilling. Recommendations: For versions prior to 0.5.3, update to version 0.5.3 or later to resolve the...
CVE-2023-3394
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...
