本ページは billing_system_project billing_system に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2022-43215 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php. | [email protected] | 9.8 | 0.87% | 2022-11-22 | 2025-04-29 |
| CVE-2022-43214 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php. | [email protected] | 9.8 | 0.89% | 2022-11-22 | 2025-04-29 |
| CVE-2022-41504 | An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file. | [email protected] | 7.2 | 0.99% | 2022-10-18 | 2025-05-15 |
| CVE-2022-41498 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php. | [email protected] | 7.2 | 0.73% | 2022-10-17 | 2025-05-13 |