moderngigabyte modernbill vulnerabilities and exploits

(subscribe to this query)

Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and previous versions allow remote attackers or administrators to execute arbitrary SQL commands via the (1) id parameter in (a) user.php, or (2) where and (3) order parameters to (b) admin.php.

Moderngigabyte Modernbill

1 EDB exploit

PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and previous versions allows remote malicious users to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code.

Moderngigabyte Modernbill

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) c_code or (2) aid parameters.

Moderngigabyte Modernbill

2 EDB exploits

ModernBill 5.0.4 and previous versions uses cURL with insecure settings for CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST that do not verify SSL certificates, which allows remote malicious users to read network traffic via a man-in-the-middle (MITM) attack.

Moderngigabyte Modernbill

PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote malicious users to execute arbitrary PHP code via a URL in the DIR parameter.

Moderngigabyte Modernbill 1.6

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook