EUVD-2018-3474

Malware in sbrugna...

CVE-2018-11443

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

CVE-2018-11444

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

Sql injection

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

Cross site scripting

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

CVE-2018-11444

CVE-2018-11444 affects EasyService Billing 1.0. The vulnerability is a SQL Injection in the q parameter of jobcard-ongoing.php, caused by unsafe handling of input that enables crafted SQL payloads. Public exploit details show boolean-based and error-based techniques; multiple advisories corrobora...

CVE-2018-11444

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

CVE-2018-11443: Improper Neutralization of Input During Web Page Generation

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

PT-2018-10573

Name of the Vulnerable Software and Affected Versions EasyService Billing version 1.0 Description The issue affects the q parameter in jobcard-ongoing.php, where a Cross-site Scripting problem has been identified. Recommendations For EasyService Billing version 1.0, avoid using the q parameter in...

CVE-2018-11444: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...