Vulnerability CVE-2023-49624
Published: 2024-01-04

Description:
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter of the material_bill.php resource does not validate the characters received and they are sent unfiltered to the database.

 References:
https://fluidattacks.com/advisories/zimerman/
https://www.kashipara.com/
Copyright 2026, cxsecurity.com

 

Back to Top