Billing System Project Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Billing System Project Project records in CISA KEV

No Billing System Project Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Billing System Project · all components

TI-2022-19897 CVE-2022-41439 · GHSA-35px-6m82-p8rw

HIGH 73

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00883 Published 2022-09-30 No fix listed CWE-89

TI-2022-19896 CVE-2022-41437 · GHSA-2vh8-37v3-crfv

HIGH 73

Billing System Project v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/createProduct.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01765 Published 2022-09-30 No fix listed CWE-434

TI-2022-19898 CVE-2022-41440 · GHSA-f3wc-8274-674f

HIGH 67

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00883 Published 2022-09-30 No fix listed CWE-89

TI-2022-21075 CVE-2022-43213 · GHSA-3689-vv2m-5qqc

MEDIUM 44

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00849 Published 2022-11-23 No fix listed CWE-89