A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 5.5 · angeljudesuarezNVD modified 2026-10-18 21:10
Affected (CPE criteria) 1
cpe:2.3:a:angeljudesuarez:billing_system:1.0:*:*:*:*:*:*:*
References 6
- https://itsourcecode.com/ Product
- https://vuldb.com/?ctiid.330911 Permissions Required, VDB Entry
- https://vuldb.com/?id.330911 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.678665 Third Party Advisory, VDB Entry
- https://www.yuque.com/yuqueyonghuexlgkz/zepczx/py9oh6m1p7mx4eqr?singleDoc Exploit, Third Party Advisory
- https://www.yuque.com/yuqueyonghuexlgkz/zepczx/py9oh6m1p7mx4eqr?singleDoc Exploit, Third Party Advisory