https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-43213.htmlhttps://patchthecve.com/cve/CVE-2022-43213.htmlWed, 17 Jun 2026 05:06:03 +0000CRITICAL 9.8: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php.https://patchthecve.com/cve/CVE-2022-43212.htmlhttps://patchthecve.com/cve/CVE-2022-43212.htmlWed, 17 Jun 2026 05:06:03 +0000CRITICAL 9.8: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php.https://patchthecve.com/cve/CVE-2022-41440.htmlhttps://patchthecve.com/cve/CVE-2022-41440.htmlWed, 17 Jun 2026 05:03:13 +0000HIGH 7.2: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php.https://patchthecve.com/cve/CVE-2022-41439.htmlhttps://patchthecve.com/cve/CVE-2022-41439.htmlWed, 17 Jun 2026 05:03:13 +0000HIGH 7.2: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php.https://patchthecve.com/cve/CVE-2022-41437.htmlhttps://patchthecve.com/cve/CVE-2022-41437.htmlWed, 17 Jun 2026 05:03:13 +0000HIGH 7.2: Billing System Project v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/createProduct.php.