https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-65380.htmlhttps://patchthecve.com/cve/CVE-2025-65380.htmlWed, 17 Jun 2026 09:55:39 +0000MEDIUM 6.5: PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.https://patchthecve.com/cve/CVE-2025-65379.htmlhttps://patchthecve.com/cve/CVE-2025-65379.htmlWed, 17 Jun 2026 09:55:39 +0000MEDIUM 6.5: PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query.https://patchthecve.com/cve/CVE-2025-12617.htmlhttps://patchthecve.com/cve/CVE-2025-12617.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2024-7913.htmlhttps://patchthecve.com/cve/CVE-2024-7913.htmlWed, 17 Jun 2026 08:21:10 +0000HIGH 7.3: A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument lname/fname/mi/address/contact/meterReader leads to sql injection. The attack may be initiated remotelhttps://patchthecve.com/cve/CVE-2024-7839.htmlhttps://patchthecve.com/cve/CVE-2024-7839.htmlWed, 17 Jun 2026 08:21:01 +0000HIGH 7.3: A vulnerability classified as critical has been found in itsourcecode Billing System 1.0. This affects an unknown part of the file addbill.php. The manipulation of the argument owners_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the pubhttps://patchthecve.com/cve/CVE-2024-37872.htmlhttps://patchthecve.com/cve/CVE-2024-37872.htmlWed, 17 Jun 2026 07:38:57 +0000HIGH 8.1: SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.https://patchthecve.com/cve/CVE-2024-37849.htmlhttps://patchthecve.com/cve/CVE-2024-37849.htmlWed, 17 Jun 2026 07:38:55 +0000CRITICAL 9.8: A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter.