Vendors / Billing System Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Billing System Project records in CISA KEV No Billing System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01394 · Published 2022-10-18 · No fix listed CWE-434
Priority HIGH 67
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00891 · Published 2022-10-17 · No fix listed CWE-89
Priority MEDIUM 51
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0094 · Published 2022-11-22 · No fix listed CWE-89
Priority MEDIUM 51
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00959 · Published 2022-11-22 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
2 2 0 0 0
THREATIST.IORead the docs