repository icon
fossbilling / fossbilling Project repository

Empower your hosting business with FOSSBilling, the free and open-source solution for efficient billing and client management.

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN1 DAY

FIX

WITHIN6 DAYS

Cookie without Secure flag
nyeooo
informative
Medium
A user with staff permission can takeover administrator account and can also per...
manikeshhhh
informative
Medium
Change password without current password
ch1nhpd
not applicable
Session is still valid after changing password
ch1nhpd
Low
•CVE-2023-4005
Fossbilling is Vulnerable to HTML Injection During the Generation of Invoices, W...
abhishekmorla
Medium
•CVE-2023-3568
SQL Injection in search
scgajge12
not applicable
Reflected XSS in date
scgajge12
Medium
•CVE-2023-3521
CSV Injection while export users
lujiefsi
High
•CVE-2023-3493
SQL injection in searchArticles function
nhienit2010
Critical
•CVE-2023-3490
Remote Code Execution via File upload
nhienit2010
High
•CVE-2023-3491
Sensitive Cookie Without Secure Flag
uonghoangminhchau
informative
Medium
Sensitive Cookie Without HttpOnly Flag
uonghoangminhchau
Medium
Server-Side Template Injection leads to Remote Code Execution
hiu240900
High
•CVE-2023-3393
Stored XSS on entire Client site
hiu240900
Medium
Session Fixation Vulnerability
m0ck3d
Medium
•CVE-2023-3394
Users can order Add-Ons Separately
lujiefsi
Medium
•CVE-2023-3228
Downloadable product type lacks order status check
lujiefsi
Medium
•CVE-2023-3230
Privilege Escalation Vulnerability in Product Upgrade Module
lujiefsi
Medium
Security vulnerability in product bundling feature
lujiefsi
Medium
•CVE-2023-3227
Serious Security Vulnerability Discovered in Promotion
lujiefsi
Medium
we still can order the product even it is disabled
lujiefsi
Medium
•CVE-2023-3229
missing authentication for invoice
lujiefsi
informative
High