Description

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginCheck.php resource does not validate the characters received and they are sent unfiltered to the database.

INFO

Published Date :

2025-05-12T23:34:40.193Z

Last Modified :

2025-05-13T14:07:46.752Z

Source :

Fluid Attacks
AFFECTED PRODUCTS

The following products are affected by CVE-2023-49641 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-49641.

URL Resource
https://fluidattacks.com/advisories/zimerman/ cve-icon cve-icon
https://www.kashipara.com/ cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact