Billing System Project Project Project maintains a billing system product with a niche vulnerability footprint centered on SQL injection weaknesses in database query construction. This application-layer input-handling exposure reflects the common risks in systems that integrate user input with database operations; live severity, exploitation, and coverage counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Billing System Project Project Project over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-43214CRITICAL Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php. | Nov 22, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-43213CRITICAL Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php. | Nov 23, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-43212CRITICAL Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php. | Nov 22, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-43215CRITICAL Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php. | Nov 22, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-41437HIGH Billing System Project v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/createProduct.php. | Sep 30, 2022 | 7.2 | 25 | NO | NO |
CVE-2022-41504HIGH An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP | Oct 18, 2022 | 7.2 | 24 | NO | NO |
CVE-2022-41498HIGH Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php. | Oct 17, 2022 | 7.2 | 24 | NO | NO |
CVE-2022-41440HIGH Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php. | Sep 30, 2022 | 7.2 | 24 | NO | NO |
CVE-2022-41439HIGH Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php. | Sep 30, 2022 | 7.2 | 19 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Billing System Project Project Project.
Media articles that mention a CVE ID that affects a product developed by Billing System Project Project Project — matched by CVE ID, not by vendor name.