CVE-2024-37872

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Score

CVSS 3.1 8.1 High

Status

Analyzed - cve@mitre.org

Published

2024-07-09

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Billing System (Angeljudesuarez)
• Billing System (Itsourcecode)

References

• https://github.com/TThuyyy/cve1/issues/4