Skip to content
OpenAdvisories
High · 8.1 CVE-2024-37872 EUVD-2024-36859GHSA-gcx9-r423-9gfc

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL comma…

Published Jul 9, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.

References