CVE-2022-43213: Improper Neutralization of Special Elements used in an SQL Command

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php...

CVE-2022-43213

CVE-2022-43213 affects Billing System Project v1.0, where a SQL injection vulnerability exists in the id parameter of editorder.php. The issue is caused by improper input handling, enabling an attacker to manipulate SQL queries. The NVD/NVD-derived metrics rate impact as critical (C:H, I:H, A:H) ...

CVE-2022-43213

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php...

CVE-2022-43212

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php...

CVE-2022-43212

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php...

Sql injection

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php...

CVE-2022-43214

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php...

CVE-2022-43214

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php...

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

Sql injection

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php...

Sql injection

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the orderId parameter in fetchOrderData.php against an externally entered SQL statement. An attacker...

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the endDate parameter in getOrderReport.php against an externally entered SQL statement. An attacker...

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

CVE-2022-43214

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php...

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

PT-2022-26795 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the orderId parameter at the "printOrder.php" endpoint. Recommendations: For Billing System Project...

PT-2022-26796 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the endDate parameter at the "getOrderReport.php" endpoint. Recommendations: For Billing System...

CVE-2022-43214: Improper Neutralization of Special Elements used in an SQL Command

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php...

CVE-2022-43214

Billing System Project v1.0 contains a SQL injection vulnerability in printOrder.php via the orderId parameter. Root cause is lack of input validation, enabling potentially unauthorized access to sensitive database data (CVE-2022-43214). CVSS v3.1 base score 9.8 (CRITICAL). Exploit details are no...