CVE-2024-7913

The CVE-2024-7913 entry affects itsourcecode Billing System 1.0, with a SQL injection in /addclient1.php triggered by manipulating lname, fname, mi, address, contact, or meterReader. Root cause is unsafely constructed inputs leading to injection; attack can be remote and the exploit has been disc...

CVE-2024-7839

CVE-2024-7839 affects itsourcecode Billing System 1.0, with a vulnerability in the file addbill.php where the argument owners_id can be manipulated to cause SQL injection. The issue is exploitable remotely and exploits have been disclosed publicly. Connected documents consistently describe this a...

CVE-2024-37849

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...