Aggregates CVE and security vulnerability intelligence across all water_billing_system_project-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk sql injection and vendor risk cross-site scripting and related problems; some flaws may lead to vendor impact data exposure and vendor impact session compromise.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2023-27241 | SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the lastname text box under the Add Client module. | [email protected] | 6.1 | 0.47% | 2023-03-27 | 2024-11-21 |
| CVE-2022-30462 | Water-billing-management-system v1.0 is affected by: Cross Site Scripting (XSS) via /wbms/classes/Users.php?f=save, firstname. | [email protected] | 5.4 | 0.19% | 2022-05-24 | 2024-11-21 |
| CVE-2022-30461 | Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=delete_client, id | [email protected] | 9.8 | 0.31% | 2022-05-24 | 2024-11-21 |
| CVE-2020-36033 | SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php. | [email protected] | 9.8 | 0.26% | 2021-07-22 | 2024-11-21 |
| CVE-2020-28183 | SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to process.php. | [email protected] | 9.8 | 1.47% | 2020-11-17 | 2024-11-21 |