CVE-2024-37872

8.1 highEPSS 0.5%

High (8.1) in angeljudesuarez billing system. EPSS 0.5% chance of exploitation in the next 30 days.

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-07-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

angeljudesuarez:billing_system

References

https://github.com/TThuyyy/cve1/issues/4
https://github.com/TThuyyy/cve1/issues/4

Check your stack JSON