Sql injection

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' parameter of the materialbill.php?action=itemRelation resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-49622

CVE-2023-49622 affects Billing Software v1.0. The vulnerability is in the material_bill.php?action=itemRelation resource, where the itemnameid parameter is not validated, allowing unauthenticated SQL Injection by sending unfiltered data to the database. Impact is high (as per CVSS) with potential...