Approved changes feed: RSS · Atom

cpe:2.3:a:bichitrogan:isp_billing_software:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBichitrogan (e658378a-01ea-5682-b5b9-e09c3febe953)
ProductIsp Billing Software (81712cbb-abb0-5bef-8c14-980252d4034b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6624 vulnerable 2026-06-08 08:07:04.946963 BichitroGan ISP Billing Software Pool List add cross site scripting
LOW (2.4)
A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknown function of the file /?\_route=pool/add of the component Pool List Interface. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-20T09:15:17.533Z
Updated: 2026-04-20T13:27:39.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6623 vulnerable 2026-06-08 08:07:04.946543 BichitroGan ISP Billing Software Profile users-view cross site scripting
LOW (2.4)
A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an unknown function of the file /?_route=settings/users-view/ of the component Profile Page Handler. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-20T09:00:20.118Z
Updated: 2026-04-20T15:29:21.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6622 vulnerable 2026-06-08 08:07:04.946106 BichitroGan ISP Billing Software Customer edit cross site scripting
LOW (2.4)
A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unknown function of the file /?\_route=customers/edit/ of the component Customer Handler. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-20T08:45:20.512Z
Updated: 2026-04-20T11:10:22.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5031 vulnerable 2026-06-08 08:07:02.903199 BichitroGan ISP Billing Software Endpoint users-view resource injection
MEDIUM (4.3)
A vulnerability was found in BichitroGan ISP Billing Software 2025.3.20. Impacted is an unknown function of the file /?_route=settings/users-view/ of the component Endpoint. The manipulation of the argument ID results in improper control of resource identifiers. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-29T04:30:11.668Z
Updated: 2026-04-01T14:27:38.186Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.