Advisories · Technology
fossbilling/fossbilling.
Every CVE that names fossbilling/fossbilling among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.8 Low
Insufficient Session Expiration in fossbilling/fossbilling
- fossbilling/fossbilling
- Authentication bypass
- CVSS 5.4 Medium
Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling
- fossbilling/fossbilling
- Cross-site scripting (XSS)
- CVSS 7.7 High
Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling
- fossbilling/fossbilling
- Other injection
- CVSS 8.0 High
Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling
- fossbilling/fossbilling
- Unrestricted file upload
- CVSS 9.8 CriticalCritical · CVSS 9+
SQL Injection in fossbilling/fossbilling
- fossbilling/fossbilling
- SQL injection
- CVSS 6.8 Medium
Session Fixation in fossbilling/fossbilling
- fossbilling/fossbilling
- Authentication bypass
- CVSS 8.0 High
Code Injection in fossbilling/fossbilling
- fossbilling/fossbilling
- Code injection
- CVSS 4.6 Medium
Missing Authorization in fossbilling/fossbilling
- fossbilling/fossbilling
- Broken access control
- CVSS 5.4 Medium
Business Logic Errors in fossbilling/fossbilling
- fossbilling/fossbilling
- CWE-840
- CVSS 5.4 Medium
Business Logic Errors in fossbilling/fossbilling
- fossbilling/fossbilling
- CWE-840
- CVSS 5.4 Medium
Insufficient Granularity of Access Control in fossbilling/fossbilling
- fossbilling/fossbilling
- CWE-1220