Description
A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| itsourcecode | Billing System | 1.0 | — |
References
- VDB-330911 | itsourcecode Billing System login_crud.php sql injection vdb-entry technical-description
- VDB-330911 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #678665 | itsourcecode Company The billing system 1.0 SQL Injection third-party-advisory
- https://www.yuque.com/yuqueyonghuexlgkz/zepczx/py9oh6m1p7mx4eqr?singleDoc exploit
- https://itsourcecode.com/ product