IQID:23039 HTTP Billing Management System 2.0 SQL Injection S

IQID: 23039 - May 2021

Billing Management System version 2.0 suffers from multiple remote SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to Pintu Solanki in February of 2021. Billing Management System is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to the editgroup.php, edituser.php, editcategory.php, editproduct.php, and editsales.php scripts using the id parameter, which could allow the attacker to view, add, modify or delete information in the back-end database.

A Full Description is available for this threat, please sign in for access to Full Description.

 

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

 

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

 

Date

Date Information is available for this threat, please sign in for access to Date Information.

 

External Resources

External resources are available for this threat, please sign in for access to external resources.