CVE-2022-43215

CVE-2022-43215 affects Billing System Project v1.0. The vulnerability is a SQL injection in the endDate parameter of the getOrderReport.php endpoint, as described across multiple sources. The issue arises from lack of input validation, enabling an attacker to influence SQL queries and potentially...

CVE-2022-43215: Improper Neutralization of Special Elements used in an SQL Command

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

CVE-2022-43212: Improper Neutralization of Special Elements used in an SQL Command

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php...

CVE-2022-43049: Improper Neutralization of Special Elements used in an SQL Command

Canteen Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the component /youthappam/add-food.php...

CVE-2022-41504

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41504

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41504

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41504

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-25898 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The issue is related to an arbitrary file upload vulnerability in the component /php action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP...

CVE-2022-41504: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41504

CVE-2022-41504 is an arbitrary file upload vulnerability in the Billing System Project v1.0, specifically in the /php_action/editProductImage.php component. The issue allows an attacker to upload a crafted PHP file and achieve arbitrary code execution. The CVSS score is High (7.2) with network at...

Billing System Project 代码问题漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. A security vulnerability exists in Billing System Project v1.0, which stems from an arbitrary file upload vulnerability found in component /phpaction/editProductImage. An attacker can exploit this vulnerability ...

Sql injection

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php...

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. A security vulnerability exists in Billing System Project version v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter in /phpinventory/editbrand.php...

CVE-2022-41498

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php...

CVE-2022-41498

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php...

PT-2022-25895 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project. The vulnerability can be exploited via the id parameter at the "/phpinventory/editbrand.php" API endpoint. Recommendations: For...

CVE-2022-41498

CVE-2022-41498 affects the Billing System Project v1.0, with a confirmed SQL injection vulnerability exploitable via the id parameter at /phpinventory/editbrand.php. The CVE entry lists a base score of 7.2 (High, CVSS 3.1: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The exploitation status is not provi...

CVE-2022-41498: Improper Neutralization of Special Elements used in an SQL Command

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php...

Sourcecodester Multi Restaurant Table Reservation System 1.0 - SQL Injection

Sourcecodester Multi Restaurant Table Reservation System 1.0 contains a SQL injection vulnerability via the file view-chair-list.php. It does not perform input validation on the tableid parameter, which allows unauthenticated SQL injection. An attacker can send malicious input in the GET request ...