Browse CVEs

MEDIUM 5.4 CVE-2023-6434 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6435 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6429 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6430 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6431 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6432 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6433 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6424 A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulti… Online Clinic Management System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6425 A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulti… Online Clinic Management System No fix yet Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6426 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6427 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6428 A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in pe… Online Invoicing System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6422 A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulti… Online Clinic Management System Mitigation only Fix from $1,6002023-11-30 MEDIUM 5.4 CVE-2023-6423 A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulti… Online Clinic Management System Mitigation only Fix from $1,6002023-11-30 CRITICAL 9.8 CVE-2020-35674 BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordReset.php (the endpoint that is… Online Invoicing System 2.9+ Fix from $2,3002022-09-29 HIGH 8.8 CVE-2020-35675 BigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to move the records of members across groups. The appl… Online Invoicing System 3.0+ Fix from $1,9502022-09-29 MEDIUM 5.4 CVE-2021-21260 Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants and freelancers created usin… Online Invoicing System No fix yet Fix from $1,6002021-01-22 MEDIUM 6.1 CVE-2020-35676 BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality… Online Invoicing System 3.1+ Fix from $1,6002020-12-24 MEDIUM 6.1 CVE-2020-6583 BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability,… Online Invoicing System after 2.6 Fix from $1,6002020-01-08 MEDIUM 5.3 CVE-2018-18587 BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash. Appgini Mitigation only Fix from $1,6002018-10-23