CVE-2023-49641 – Oracle Billing Software SQL Injection Vulnerability

CVE ID : CVE-2023-49641

Published : May 13, 2025, 12:15 a.m. | 26 minutes ago

Description : Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The ‘username’ parameter of the loginCheck.php resource does not validate the characters received and they are sent unfiltered to the database.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…