Vendors / Easyservice Billing Project Easyservice Billing Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Easyservice Billing Project records in CISA KEV No Easyservice Billing Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03064 · Published 2018-05-25 · No fix listed CWE-89
Priority MEDIUM 42
A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.02274 · Published 2018-05-25 · No fix listed CWE-352
Priority MEDIUM 42
A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quotation.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.02274 · Published 2018-05-25 · No fix listed CWE-352
Priority LOW 32
The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02579 · Published 2018-05-25 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 1 0 0
THREATIST.IORead the docs