Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:billing_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductBilling System (3f9de188-5093-5e6b-a974-f581d6780f40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12617 vulnerable 2026-06-08 07:04:30.529556 itsourcecode Billing System login_crud.php sql injection
HIGH (7.3)
A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2025-11-03T04:32:08.832Z
Updated: 2026-02-24T06:22:50.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7913 vulnerable 2026-06-08 06:58:23.891455 itsourcecode Billing System addclient1.php sql injection
HIGH (7.3)
A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument lname/fname/mi/address/contact/meterReader leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-18T22:00:05.260Z
Updated: 2024-08-19T16:11:42.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7839 vulnerable 2026-06-08 06:58:23.651870 itsourcecode Billing System addbill.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in itsourcecode Billing System 1.0. This affects an unknown part of the file addbill.php. The manipulation of the argument owners_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-15T21:00:05.485Z
Updated: 2024-08-16T16:04:33.921Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.