Easyservice Billing Project Easyservice Billing
4 CVEs affecting Easyservice Billing Project Easyservice Billing. Latest disclosed: 2018-05-25. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-11444 | Critical | 9.8 | 2018-05-25 | A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0. |
CVE-2018-11445 | High | 8.8 | 2018-05-25 | A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0. A User can be added with the Admin… |
CVE-2018-11442 | High | 8.8 | 2018-05-25 | A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quo… |
CVE-2018-11443 | Medium | 6.1 | 2018-05-25 | The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0. |