FOSSBilling records
12 published records for vendor fossbilling.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-840 Business Logic Errors2
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-384 Session Fixation1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-613 Insufficient Session Expiration1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-3490No exploit | SQL Injection in fossbilling/fossbillingfossbilling · fossbilling · CWE-89 | Critical9.8 | — | 0.9% | Jun 30, 2023 |
39Monitor | CVE-2023-4005No exploit | Insufficient Session Expiration in fossbilling/fossbillingfossbilling · fossbilling · CWE-613 | Critical9.8 | — | 0.5% | Jul 30, 2023 |
35Monitor | CVE-2023-3491No exploit | Unrestricted Upload of File with Dangerous Type in fossbilling/fossbillingfossbilling · fossbilling · CWE-434 | High8.8 | — | 0.9% | Jun 30, 2023 |
32Monitor | CVE-2023-3493No exploit | Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbillingfossbilling · fossbilling · CWE-1236 | High8.0 | — | 0.5% | Jun 30, 2023 |
30Monitor | CVE-2023-3230No exploit | Missing Authorization in fossbilling/fossbillingfossbilling · fossbilling · CWE-862 | High7.5 | — | 0.4% | Jun 14, 2023 |
28Monitor | CVE-2023-3393No exploit | Code Injection in fossbilling/fossbillingfossbilling · fossbilling · CWE-94 | High7.2 | — | 1.0% | Jun 23, 2023 |
26Monitor | CVE-2023-3229No exploit | Business Logic Errors in fossbilling/fossbillingfossbilling · fossbilling · CWE-840 | Medium6.5 | — | 0.5% | Jun 14, 2023 |
24Monitor | CVE-2023-3521Proof of concept | Cross-site Scripting (XSS) - Reflected in fossbilling/fossbillingfossbilling · fossbilling · CWE-79 | Medium6.1 | — | 0.9% | Jul 5, 2023 |
22Monitor | CVE-2023-3228No exploit | Business Logic Errors in fossbilling/fossbillingfossbilling · fossbilling · CWE-840 | Medium5.7 | — | 0.5% | Jun 14, 2023 |
22Monitor | CVE-2023-3227No exploit | Insufficient Granularity of Access Control in fossbilling/fossbillingfossbilling · fossbilling · CWE-1220 | Medium5.7 | — | 0.4% | Jun 14, 2023 |
21Monitor | CVE-2023-3394No exploit | Session Fixation in fossbilling/fossbillingfossbilling · fossbilling · CWE-384 | Medium5.4 | — | 0.5% | Jun 23, 2023 |
19Monitor | CVE-2023-3568No exploit | Open Redirect in alextselegidis/easyappointmentsfossbilling · fossbilling · CWE-601 | Medium4.8 | — | 0.4% | Jul 10, 2023 |
- CVE-2023-349039Monitor
SQL Injection in fossbilling/fossbilling
CriticalCVSS 9.8No exploitEPSS 1%fossbilling · fossbillingJun 30, 2023
- CVE-2023-400539Monitor
Insufficient Session Expiration in fossbilling/fossbilling
CriticalCVSS 9.8No exploitEPSS 0%fossbilling · fossbillingJul 30, 2023
- CVE-2023-349135Monitor
Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling
HighCVSS 8.8No exploitEPSS 1%fossbilling · fossbillingJun 30, 2023
- CVE-2023-349332Monitor
Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling
HighCVSS 8.0No exploitEPSS 1%fossbilling · fossbillingJun 30, 2023
- CVE-2023-323030Monitor
Missing Authorization in fossbilling/fossbilling
HighCVSS 7.5No exploitEPSS 0%fossbilling · fossbillingJun 14, 2023
- CVE-2023-339328Monitor
Code Injection in fossbilling/fossbilling
HighCVSS 7.2No exploitEPSS 1%fossbilling · fossbillingJun 23, 2023
- CVE-2023-322926Monitor
Business Logic Errors in fossbilling/fossbilling
MediumCVSS 6.5No exploitEPSS 1%fossbilling · fossbillingJun 14, 2023
- CVE-2023-352124Monitor
Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling
MediumCVSS 6.1Proof of conceptEPSS 1%fossbilling · fossbillingJul 5, 2023
- CVE-2023-322822Monitor
Business Logic Errors in fossbilling/fossbilling
MediumCVSS 5.7No exploitEPSS 0%fossbilling · fossbillingJun 14, 2023
- CVE-2023-322722Monitor
Insufficient Granularity of Access Control in fossbilling/fossbilling
MediumCVSS 5.7No exploitEPSS 0%fossbilling · fossbillingJun 14, 2023
- CVE-2023-339421Monitor
Session Fixation in fossbilling/fossbilling
MediumCVSS 5.4No exploitEPSS 1%fossbilling · fossbillingJun 23, 2023
- CVE-2023-356819Monitor
Open Redirect in alextselegidis/easyappointments
MediumCVSS 4.8No exploitEPSS 0%fossbilling · fossbillingJul 10, 2023