vendor:
Client Billing System
by:
nigh7f411
8.8
CVSS
HIGH
Remote File Inclusion and Cross-Site Scripting
94, 79
CWE
Product Name: Client Billing System
Affected Version From: 4.4.X
Affected Version To: 4.4.X
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
ModernBill .:. Client Billing System – User Login
ModernBill versions 4.4.X and below are vulnerable to Remote File Inclusion and Cross-Site Scripting. An attacker can exploit this vulnerability by sending a malicious URL to the target user. The malicious URL contains a script that is hosted on a remote server. When the target user clicks on the malicious URL, the script is executed in the context of the target user's browser. This can allow the attacker to gain access to the target user's account and perform malicious activities.
Mitigation:
Upgrade to the latest version of ModernBill and apply the latest security patches.
