Approved changes feed: RSS · Atom

cpe:2.3:a:angeljudesuarez:billing_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorAngeljudesuarez (da54a5a8-16d8-5d98-ae37-5a80108a9da9)
ProductBilling System (348d2a7c-0f53-529d-8c20-0572fb2cde0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12617 vulnerable 2026-06-03 14:58:44.611875 itsourcecode Billing System login_crud.php sql injection
HIGH (7.3)
A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2025-11-03T04:32:08.832Z
Updated: 2026-02-24T06:22:50.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7913 vulnerable 2026-06-03 14:58:07.610640 itsourcecode Billing System addclient1.php sql injection
HIGH (7.3)
A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument lname/fname/mi/address/contact/meterReader leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-18T22:00:05.260Z
Updated: 2024-08-19T16:11:42.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7839 vulnerable 2026-06-03 14:58:07.366759 itsourcecode Billing System addbill.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in itsourcecode Billing System 1.0. This affects an unknown part of the file addbill.php. The manipulation of the argument owners_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-15T21:00:05.485Z
Updated: 2024-08-16T16:04:33.921Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37872 vulnerable 2026-06-03 14:56:07.235283 Details available
SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Published: 2024-07-09T00:00:00.000Z
Updated: 2024-08-02T03:57:39.985Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.