CVE-2024-37849

A SQL injection vulnerability affects itsourcecode Billing System 1.0, enabling a local attacker to execute arbitrary code in process.php via the username parameter. Affected: itsourcecode Billing System 1.0, component process.php (username). Impact: high (arbitrary code execution) per CVSS 3.1 m...