https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-43215.htmlhttps://patchthecve.com/cve/CVE-2022-43215.htmlWed, 17 Jun 2026 05:06:03 +0000CRITICAL 9.8: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php.https://patchthecve.com/cve/CVE-2022-43214.htmlhttps://patchthecve.com/cve/CVE-2022-43214.htmlWed, 17 Jun 2026 05:06:03 +0000CRITICAL 9.8: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php.https://patchthecve.com/cve/CVE-2022-41504.htmlhttps://patchthecve.com/cve/CVE-2022-41504.htmlWed, 17 Jun 2026 05:03:17 +0000HIGH 7.2: An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-41498.htmlhttps://patchthecve.com/cve/CVE-2022-41498.htmlWed, 17 Jun 2026 05:03:17 +0000HIGH 7.2: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php.