PT-2018-10574 · Easyservice · Easyservice Billing

CVE-2018-11444

Published

2018-05-25

Updated

2018-06-27

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EasyService Billing version 1.0

Description A SQL Injection issue was observed in the parameter q in the jobcard-ongoing.php file.

Recommendations For EasyService Billing version 1.0, avoid using the parameter q in the affected file until the issue is resolved.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2018-11444

Easyservice Billing