PatchTheCVEeasyservice billing vulnerabilities and fixes
Recent CVEs affecting easyservice billing, with upgrade or downgrade steps. 4 tracked.
Also searched as: easyservicebilling.
easyservice billing has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-05-25. Highest priority: CVE-2018-11444 (score 66/100).
- CVE-2018-11445 HIGH 8.8 DOWNGRADE A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyServic
- CVE-2018-11444 CRITICAL 9.8 DOWNGRADE A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.
- CVE-2018-11443 MEDIUM 6.1 DOWNGRADE The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.
- CVE-2018-11442 HIGH 8.8 DOWNGRADE A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=
FAQ
How do I fix easyservice billing vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is easyservice billing being exploited right now?
None of the tracked easyservice billing CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which easyservice billing CVE should I patch first?
CVE-2018-11444 currently ranks highest (66/100): A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0..