PT-2025-16343

Name of the Vulnerable Software and Affected Versions cashbook version 4.0.3 Description The issue is related to an arbitrary file read vulnerability. It affects the "/api/entry/flow/invoice/show?invoice=" API endpoint, where the invoice parameter is involved. Recommendations For version 4.0.3,...

CVE-2025-27980

The payment program CashBook by CashBook India (version 4.0.3 ) is affected by an arbitrary file read vulnerability. The flaw exists within the /api/entry/flow/invoice/show?invoice= endpoint, which can lead to the exposure of sensitive information to an unauthorized actor. The CVSS 3.1 score for ...

CVE-2025-27980

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=...

CVE-2025-27980: Exposure of Sensitive Information to an Unauthorized Actor

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=...

CVE-2025-3186

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient/invoice.php. The manipulation of the argument appid leads to sql injection. The attack can be...

PT-2025-14818 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue was found in the projectworlds Online Doctor Appointment Booking System. The vulnerability affects an unknown functionality of the file...

CVE-2025-2715

A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...

CVE-2025-2715 timschofield webERP Confirm Dispatch and Invoice Page ConfirmDispatch_Invoice.php cross site scripting

A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...

CVE-2025-2715

A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...

PT-2025-12681

Name of the Vulnerable Software and Affected Versions timschofield webERP versions up to 5.0.0.rc+13 Description A problematic vulnerability has been found in timschofield webERP, affecting an unknown part of the file ConfirmDispatch Invoice.php of the component Confirm Dispatch and Invoice Page...

CVE-2025-2715: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...

CVE-2024-44313

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the invoice function in Orders.php. A user can access and generate invoices without authorization. Remediation Upgrade tastyigniter/tastyigniter to version 4.0.0 or higher. References - Medium Blog - Vulnerable...

GHSA-GG2F-R4JH-VPMH TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

CVE-2024-44313

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

TastyIgniter 安全漏洞

TastyIgniter is an online ordering software from TastyIgniter open source. A security vulnerability exists in TastyIgniter version 3.7.6, which stems from improper access control of the invoice function in Orders.php, which could lead to unauthorized users accessing and generating invoices...

CVE-2024-44313

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

CVE-2024-44313

The TastyIgniter 3.7.6 software is vulnerable to an Incorrect Access Control vulnerability in the invoice() function located within Orders.php. The root cause is a lack of proper permission checks, which allows unauthorized users to access and generate invoices. This flaw can lead to the exposure...

CVE-2024-44313

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...