An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Export limit exceeded: 425877 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2022-41504
CVSS 3.1 · 7.2 High
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2022-41498
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php.
CVSS 3.1 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-43215
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php.
CVSS 3.1 · 9.8 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-43214
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php.
CVSS 3.1 · 9.8 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.