CVE-2023-3394 Session Fixation in fossbilling/fossbilling

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3394

The CVE-2023-3394 entry describes a Session Fixation flaw in FossBilling (fossbilling/fossbilling) prior to version 0.5.1. The root cause is failing to regenerate the session identifier (PHPSESSID) after user authentication, allowing an attacker to fix a session before login and potentially acces...

CVE-2023-3393 Code Injection in fossbilling/fossbilling

Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3393 Code Injection in fossbilling/fossbilling

Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...

fossbilling 授权问题漏洞

fossbilling is a free open source solution for efficient billing and customer management. An authorization issue vulnerability exists in versions prior to fossbilling 0.5.1 that stems from the presence of session fixing...

fossbilling 代码注入漏洞

fossbilling is a free open source solution for efficient billing and customer management. A code injection vulnerability exists in versions prior to fossbilling 0.5.1. An attacker could exploit this vulnerability to perform a code injection attack...

CVE-2023-3230

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3228

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3227

Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3228

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3229

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3229

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

Design/Logic Flaw

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

Design/Logic Flaw

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

Authorization

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3227 Insufficient Granularity of Access Control in fossbilling/fossbilling

Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0...

fossbilling 安全漏洞

fossbilling is a free open source solution for efficient billing and customer management. A security vulnerability exists in fossbilling versions prior to 0.5.0 that stems from insufficient access control granularity...

PT-2023-23690 · Unknown · Fossbilling

Name of the Vulnerable Software and Affected Versions: fossbilling/fossbilling versions prior to 0.5.0 Description: The issue is related to insufficient granularity of access control. There is no information provided about the estimated number of potentially affected devices worldwide or real-wor...

CVE-2023-3227 Insufficient Granularity of Access Control in fossbilling/fossbilling

Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0...

fossbilling 安全漏洞

fossbilling is a free open source solution for efficient billing and customer management. A security vulnerability exists in fossbilling versions prior to 0.5.0 that stems from a business logic error...