Vulnerabilities > Billing System Project > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-11-22 CVE-2022-43214 SQL Injection vulnerability in Billing System Project Billing System 1.0
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php.
network
low complexity
billing-system-project CWE-89
critical
9.8
2022-11-22 CVE-2022-43215 SQL Injection vulnerability in Billing System Project Billing System 1.0
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php.
network
low complexity
billing-system-project CWE-89
critical
9.8