CVE-2023-49666

Publication date

2024-01-04 14:02:16

Family

Fluid Attacks

State

PUBLISHED

Description

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The custmer_details parameter of the submit_material_list.php resource does not validate the characters received and they are sent unfiltered to the database.