CVE-2023-49622

CVE-2023-49622 affects Billing Software v1.0. The vulnerability is in the material_bill.php?action=itemRelation resource, where the itemnameid parameter is not validated, allowing unauthenticated SQL Injection by sending unfiltered data to the database. Impact is high (as per CVSS) with potential...