Vulnerabilities

TI-2018-08170 CVE-2018-11445 · GHSA-r8fm-33c8-8gjg

A CSRF issue was discovered on the User Add/System Settings Page…

MEDIUM 42

A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02274 Published 2018-05-25 No fix listed CWE-352

TI-2018-08169 CVE-2018-11444 · GHSA-qf8w-fg9w-6whm

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.

MEDIUM 48

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03064 Published 2018-05-25 No fix listed CWE-89

TI-2018-08168 CVE-2018-11443 · GHSA-vfvr-w6xj-mpr4

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.

LOW 32

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02579 Published 2018-05-25 No fix listed CWE-79

TI-2018-08167 CVE-2018-11442 · GHSA-7vhq-vmqv-h2rx

A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a…

MEDIUM 42

A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quotation.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02274 Published 2018-05-25 No fix listed CWE-352

Vulnerabilities

Filters

A CSRF issue was discovered on the User Add/System Settings Page…

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.

A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a…