critical9.8
CVE-2023-49641
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.
Impact
Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginCheck.php resource does not validate the characters received and they are sent unfiltered to the database.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.