Latest critical severity vulnerabilities for "oretnom23 establishment billing management system"

Where

AND

Sort:

Versions

1.0

oretnom23 Establishment Billing Management SystemSourceCodester Establishment Billing Management System Login sql injection

Risk 61

Severity

9.8

EPSS

0.06%

SQL Injection

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273155.

First published (updated )

CVE-2024-7286

Billing Management System Project Billing Management SystemSourceCodester Billing Management System POST Parameter ajax_service.php sql injection

Risk 86

Severity

9.8

SQL Injection

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been found in SourceCodester Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajaxservice.php of the component POST Parameter Handler. The manipulation of the argument dropservices leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228397 was assigned to this vulnerability.

First published (updated )

CVE-2023-2595

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.