VULNERABILITY INTELLIGENCE

CVE-2023-49641

CVSS score9.8 CRITICAL

EPSS probability0.42%

CISA KEVNot currently listed

Published2025-05-13

Last modified2026-06-17

Description

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginCheck.php resource does not validate the characters received and they are sent unfiltered to the database.