Oretnom23 Establishment Billing Management System
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Oretnom23 Establishment Billing Management System.
By the Year
In 2026 there have been 0 vulnerabilities in Oretnom23 Establishment Billing Management System. Establishment Billing Management System did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 9 | 8.53 |
| 2023 | 2 | 9.30 |
It may take a day or so for new Establishment Billing Management System vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Oretnom23 Establishment Billing Management System Security Vulnerabilities
SQLi via id in /view_bill.php SourceCodester Establishment Billing Mgmt Sys 1.0
CVE-2024-7308
8.8 - High
- July 31, 2024
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view_bill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273200.
SQL Injection
SourceCodester EBMS 1.0 SQLi in /manage_billing.php via id
CVE-2024-7307
8.8 - High
- July 31, 2024
A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage_billing.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273199.
SQL Injection
SQLi in SourceCodester EBMS 1.0 via /manage_block.php (CVE20247306)
CVE-2024-7306
8.8 - High
- July 31, 2024
A vulnerability, which was classified as critical, was found in SourceCodester Establishment Billing Management System 1.0. Affected is an unknown function of the file /manage_block.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273198 is the identifier assigned to this vulnerability.
SQL Injection
SQLi in SourceCodester Establishment Billing Management System 1.0 /manage_tenant.php
CVE-2024-7290
8.8 - High
- July 31, 2024
A vulnerability classified as critical has been found in SourceCodester Establishment Billing Management System 1.0. This affects an unknown part of the file /manage_tenant.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273159.
SQL Injection
SourceCodester EBMS 1.0 SQLi via /manage_payment.php id
CVE-2024-7289
8.8 - High
- July 31, 2024
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /manage_payment.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273158 is the identifier assigned to this vulnerability.
SQL Injection
CVE-2024-7288: SourceCodester EstBillMgmt 1.0 Remote SQLi via /ajax.php
CVE-2024-7288
8.8 - High
- July 31, 2024
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_block. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273157 was assigned to this vulnerability.
SQL Injection
Critical SQLi in SourceCodester EBMS 1.0 via /manage_user.php
CVE-2024-7287
8.8 - High
- July 31, 2024
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273156.
SQL Injection
SQLi in SourceCodester Establishment Billing Sys 1.0 Login Page
CVE-2024-7286
9.8 - Critical
- July 31, 2024
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273155.
SQL Injection
Remote XSS in SourceCodester Establishment Billing System 1.0 /admin/ajax.php
CVE-2024-7285
5.4 - Medium
- July 31, 2024
A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/ajax.php?action=save_settings. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273154 is the identifier assigned to this vulnerability.
XSS
SQLi in SourceCodester Billing Management System 1.0 via editproduct.php GET id
CVE-2023-2689
8.8 - High
- May 14, 2023
A vulnerability classified as critical was found in SourceCodester Billing Management System 1.0. This vulnerability affects unknown code of the file editproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228970 is the identifier assigned to this vulnerability.
SQL Injection
SourceCodester Billing Mgmt Sys 1.0 POST Param Handler SQLi (drop_services)
CVE-2023-2595
9.8 - Critical
- May 09, 2023
A vulnerability has been found in SourceCodester Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajax_service.php of the component POST Parameter Handler. The manipulation of the argument drop_services leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228397 was assigned to this vulnerability.
SQL Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Oretnom23 Establishment Billing Management System or by Oretnom23? Click the Watch button to subscribe.
