GCVE - cpe:2.3:a:itsourcecode:billing_system:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:billing_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Itsourcecode (`14c06684-839a-5802-ab2e-bd37208c001a`)
Product	Billing System (`3f9de188-5093-5e6b-a974-f581d6780f40`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-7913`	vulnerable	2026-06-08 06:58:23.891403	itsourcecode Billing System addclient1.php sql injection HIGH (7.3) A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument lname/fname/mi/address/contact/meterReader leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2024-08-18T22:00:05.260Z Updated: 2024-08-19T16:11:42.714Z Open on db.gcve.eu Reference links https://vuldb.com/?id.275039 https://vuldb.com/?ctiid.275039 https://vuldb.com/?submit.391841 https://github.com/ppp-src/a/issues/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7839`	vulnerable	2026-06-08 06:58:23.650979	itsourcecode Billing System addbill.php sql injection HIGH (7.3) A vulnerability classified as critical has been found in itsourcecode Billing System 1.0. This affects an unknown part of the file addbill.php. The manipulation of the argument owners_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2024-08-15T21:00:05.485Z Updated: 2024-08-16T16:04:33.921Z Open on db.gcve.eu Reference links https://vuldb.com/?id.274743 https://vuldb.com/?ctiid.274743 https://vuldb.com/?submit.391531 https://github.com/ppp-src/a/issues/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-37872`	vulnerable	2026-06-08 06:39:48.164447	Details available SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. Published: 2024-07-09T00:00:00.000Z Updated: 2024-08-02T03:57:39.985Z Open on db.gcve.eu Reference links https://github.com/TThuyyy/cve1/issues/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-37849`	vulnerable	2026-06-08 06:39:48.129272	Details available A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter. Published: 2024-06-13T00:00:00.000Z Updated: 2024-08-15T15:09:07.349Z Open on db.gcve.eu Reference links https://github.com/ganzhi-qcy/cve/issues/3	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.