Bigprof Online Invoicing System
17 CVEs affecting Bigprof Online Invoicing System. Latest disclosed: 2023-11-30. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-35674 | Critical | 9.8 | 2022-09-29 | BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordReset.php (the endpoint that is responsib… |
CVE-2020-35675 | High | 8.8 | 2022-09-29 | BigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to move the records of members across groups. The applicable end… |
CVE-2021-21260 | High | 7.6 | 2021-01-22 | Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants and freelancers created using AppGini… |
CVE-2023-6435 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6434 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6433 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6432 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6431 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6430 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6429 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6428 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6427 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6426 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2020-35676 | Medium | 6.1 | 2020-12-24 | BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such… |
CVE-2020-6583 | Medium | 6.1 | 2020-01-08 | BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve… |
CVE-2020-35677 | Medium | 4.8 | 2020-12-24 | BigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML characters upon an administrator using admin/pageEditGroup.php to creat… |
CVE-2021-27839 | Medium | 4.4 | 2021-03-03 | A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform malicious actions such as redirecting a… |