Vulnerabilities

TI-2022-21075 CVE-2022-43213 · GHSA-3689-vv2m-5qqc

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 44

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00849 Published 2022-11-23 No fix listed CWE-89

TI-2022-19898 CVE-2022-41440 · GHSA-f3wc-8274-674f

HIGH 67

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00883 Published 2022-09-30 No fix listed CWE-89

TI-2022-19897 CVE-2022-41439 · GHSA-35px-6m82-p8rw

HIGH 73

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00883 Published 2022-09-30 No fix listed CWE-89

TI-2022-19896 CVE-2022-41437 · GHSA-2vh8-37v3-crfv

HIGH 73

Billing System Project v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/createProduct.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01765 Published 2022-09-30 No fix listed CWE-434