high8.8Public exploit code
CVE-2018-11442
A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EasyService Billing 1.0 - Cross-Site Request Forgery2018-05-26 · webapps · php
Impact
A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quotation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easyservice Billing Project | Easyservice Billing | Version 1.0 |