Vulnerabilities

TI-2022-21077 CVE-2022-43215 · GHSA-vxxj-cjwx-9587

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 51

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0094 Published 2022-11-22 No fix listed CWE-89

TI-2022-21076 CVE-2022-43214 · GHSA-jc8r-v6v4-2x76

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 51

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00959 Published 2022-11-22 No fix listed CWE-89

TI-2022-19924 CVE-2022-41504 · GHSA-76h3-fc3v-q78j

An arbitrary file upload vulnerability in the component /php_action/editProductImage.php…

HIGH 73

An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01394 Published 2022-10-18 No fix listed CWE-434

TI-2022-19922 CVE-2022-41498 · GHSA-r8qr-w292-387j

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via…

HIGH 67

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2022-10-17 No fix listed CWE-89

Vulnerabilities

Filters

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via…

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via…

An arbitrary file upload vulnerability in the component /php_action/editProductImage.php…

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via…