https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9706.htmlhttps://patchthecve.com/cve/CVE-2025-9706.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A security vulnerability has been detected in SourceCodester Water Billing System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed puhttps://patchthecve.com/cve/CVE-2025-9705.htmlhttps://patchthecve.com/cve/CVE-2025-9705.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A weakness has been identified in SourceCodester Water Billing System 1.0. Affected is an unknown function of the file /paybill.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could bhttps://patchthecve.com/cve/CVE-2025-9704.htmlhttps://patchthecve.com/cve/CVE-2025-9704.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A security flaw has been discovered in SourceCodester Water Billing System 1.0. This impacts an unknown function of the file /viewbill.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploihttps://patchthecve.com/cve/CVE-2023-7097.htmlhttps://patchthecve.com/cve/CVE-2023-7097.htmlWed, 17 Jun 2026 06:52:03 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown part of the file /addbill.php. The manipulation of the argument owners_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2023-27241.htmlhttps://patchthecve.com/cve/CVE-2023-27241.htmlWed, 17 Jun 2026 05:44:38 +0000MEDIUM 6.1: SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the lastname text box under the Add Client module.https://patchthecve.com/cve/CVE-2022-30462.htmlhttps://patchthecve.com/cve/CVE-2022-30462.htmlWed, 17 Jun 2026 04:43:41 +0000MEDIUM 5.4: Water-billing-management-system v1.0 is affected by: Cross Site Scripting (XSS) via /wbms/classes/Users.php?f=save, firstname.https://patchthecve.com/cve/CVE-2022-30461.htmlhttps://patchthecve.com/cve/CVE-2022-30461.htmlWed, 17 Jun 2026 04:43:41 +0000CRITICAL 9.8: Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=delete_client, id