Threats affecting pkg:github/dewcode91/billing-system-using-php-and-mysql

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2025-65379billing-system-using-php-and-mysql · SQL Injection Medium6.5EPSS 0.2%2025-12-02CVE Database V5CVE-2025-65379 PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query. EPSS 0.2%Vulnerability CWE-89	CVE Database V5	2025-12-02

Page 1 of 1