Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-37849 EUVD-2024-36848GHSA-6q7g-3wxj-hvcw

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the u…

Published Jun 13, 2024 · Updated Aug 15, 2024 · Assigned by mitre

Description

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter.

References