easyservice billing project vulnerabilities

Recent CVEs affecting easyservice billing project products. 4 tracked.

easyservice billing project has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-05-25. Highest priority: CVE-2018-11444 (score 66/100).

• CVE-2018-11445 HIGH 8.8 DOWNGRADE A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyServic
• CVE-2018-11444 CRITICAL 9.8 DOWNGRADE A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.
• CVE-2018-11443 MEDIUM 6.1 DOWNGRADE The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.
• CVE-2018-11442 HIGH 8.8 DOWNGRADE A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=

FAQ

How do I fix easyservice billing project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is easyservice billing project being exploited right now?

None of the tracked easyservice billing project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which easyservice billing project CVE should I patch first?

CVE-2018-11444 currently ranks highest (66/100): A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0..

Products

• easyservice billing

RSS feed for easyservice billing project · ← Back to latest CVEs