Angeljudesuarez Billing System vulnerabilities

4 CVEs affecting Angeljudesuarez Billing System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-12617, published 2025-11-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-7839, published 2024-08-15. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in itsourcecode Billing System 1.0. This affects an unknown part of the file addbill.php. The manipulation of the argument owners_id leads to sql…
CVE-2024-7913, published 2024-08-18. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument…
CVE-2024-37872, published 2024-07-09. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVE-2025-12617, published 2025-11-03. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql…