CVE-2018-11442

CVE-2018-11442 concerns a Cross‑Site Request Forgery in EasyService Billing 1.0. The vulnerability is triggered via the URI quotation-new3-new2.php?add=true&id= and can enable unauthorized actions on behalf of an authenticated user (CSRF in the quotation process). Several connected records descri...

PT-2018-10572

Name of the Vulnerable Software and Affected Versions EasyService Billing version 1.0 Description A CSRF issue was discovered, which can be triggered via a "quotation-new3-new2.php?add=true&id=" URI, allowing an attacker to add a new quotation. Recommendations For EasyService Billing version 1.0,...

CVE-2018-11442: Cross-Site Request Forgery (CSRF)

A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quotation...