Lucene search
+L

126 matches found

NVD
NVD
added 2022/09/30 3:15 p.m.26 views

CVE-2022-41437

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

7.2CVSS0.01378EPSS
Exploits1References1
OSV
OSV
added 2022/09/30 3:15 p.m.5 views

CVE-2022-41437

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

7.2CVSS6.3AI score0.01378EPSS
Exploits1References1
Prion
Prion
added 2022/09/30 3:15 p.m.19 views

Sql injection

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php...

5.8CVSS7.2AI score0.00734EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/09/30 3:15 p.m.18 views

Sql injection

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php...

5.8CVSS7.2AI score0.00734EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/09/30 3:15 p.m.18 views

Remote code execution

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

5.8CVSS7.4AI score0.01378EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/30 2:4 p.m.7 views

CVE-2022-41440

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php...

7.2AI score0.00734EPSS
Exploits1References1
CVE
CVE
added 2022/09/30 2:4 p.m.52 views

CVE-2022-41440

CVE-2022-41440 affects Billing System Project v1.0, with a SQL injection vulnerability exploitable via the id parameter in /phpinventory/editcategory.php. Multiple connected sources confirm the issue as a SQL injection in that endpoint, but no concrete patch/version update is detailed in the prov...

7.2CVSS7.2AI score0.00734EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/09/30 2:4 p.m.28 views

CVE-2022-41440

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php...

7.5AI score0.00734EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/09/30 2:4 p.m.35 views

CVE-2022-41439

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php...

7.5AI score0.00734EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/09/30 2:4 p.m.8 views

CVE-2022-41439

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php...

7.2AI score0.00734EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/09/30 2:4 p.m.26 views

CVE-2022-41437

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

7.7AI score0.01378EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/09/30 2:4 p.m.10 views

CVE-2022-41437

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

7.5AI score0.01378EPSS
Exploits1References1
CVE
CVE
added 2022/09/30 2:4 p.m.57 views

CVE-2022-41437

CVE-2022-41437 affects Billing System Project v1.0. A remote code execution (RCE) vulnerability is exposed through the /php_action/createProduct.php component. The NVD entry cites a network attack vector with low attack complexity and no user interaction, requiring high privileges, and results in...

7.2CVSS7.4AI score0.01378EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.6 views

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual Developer. Billing System Project v1.0 has a SQL injection vulnerability that stems from the id parameter in /phpinventory/edituser.php found to contain a SQL injection vulnerability...

7.2CVSS7.2AI score0.00734EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/09/30 12:0 a.m.7 views

PT-2022-25870 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The Billing System Project contains a remote code execution RCE issue via the /php action/createProduct.php component. This allows for potential code execution from a remote location...

7.2CVSS7.3AI score0.01378EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.6 views

Billing System Project 代码问题漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. A code issue vulnerability exists in Billing System Project version v1.0, which was discovered to contain a Remote Code Execution RCE vulnerability via component /phpaction/createProduct.php...

7.2CVSS7.3AI score0.01378EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/09/30 12:0 a.m.9 views

PT-2022-25871 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project. The vulnerability is exploitable via the id parameter at the "/phpinventory/edituser.php" API endpoint. This allows for potential...

7.2CVSS7.2AI score0.00734EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/30 12:0 a.m.11 views

PT-2022-25872 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project via the id parameter at the "/phpinventory/editcategory.php" API endpoint. This allows for potential exploitation. Recommendations:...

7.2CVSS7.2AI score0.00734EPSS
Exploits1References3
CNVD
CNVD
added 2022/09/22 12:0 a.m.5 views

Billing System Project has a remote code execution vulnerability

Billing System Project v1.0 is a billing system program. v1.0 of Billing System Project contains a remote code execution vulnerability that can be exploited by attackers to remotely execute code...

5.8AI score
Exploits0Affected Software1
Cvelist
Cvelist
added 2022/09/04 8:50 a.m.19 views

CVE-2022-3118 Sourcecodehero ERP System Project processlogin.php sql injection

A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.3CVSS10AI score0.00698EPSS
Exploits1References2
Rows per page
Query Builder