CVE Browser

A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform malicious actions such as redirecting a…

CVSS 4.4 EPSS 0.72% Mar 3, 2021

CVE-2021-21260 HIGH

XSS in description field

CVSS 7.6 EPSS 0.60% Jan 22, 2021

CVE-2020-35674 CRITICAL

BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordReset.php (the endpoint that is responsib…

CVSS 9.8 EPSS 1.14% Dec 24, 2020

CVE-2020-35675 HIGH

BigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to move the records of members across groups. The applicable end…

CVSS 8.8 EPSS 0.46% Dec 24, 2020

CVE-2020-35676 MEDIUM

BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such,…

CVSS 6.1 EPSS 0.76% Dec 24, 2020

CVE-2020-35677 MEDIUM

BigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML characters upon an administrator using admin/pageEditGroup.php to creat…

CVSS 4.8 EPSS 0.33% Dec 24, 2020

CVE-2020-6583 MEDIUM

BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve…

CVSS 6.1 EPSS 0.69% Jan 8, 2020

CVE-2018-18587 MEDIUM

BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.

CVSS 5.3 EPSS 0.53% Oct 23, 2018

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2019-25265	Online Inventory Manager 3.2 - Persistent Cross-Site Scripting	MEDIUM	5.1	0.33%	Feb 3, 2026
CVE-2023-6435	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6434	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6433	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6432	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6431	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6430	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6429	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6428	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6427	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6426	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6425	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6424	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6423	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2023-6422	Cross-site Scripting vulnerability in BigProf products	MEDIUM	6.3	0.39%	Nov 30, 2023
CVE-2021-27839	A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform malicious actions such as redirecting a…	MEDIUM	4.4	0.72%	Mar 3, 2021
CVE-2021-21260	XSS in description field	HIGH	7.6	0.60%	Jan 22, 2021
CVE-2020-35674	BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordReset.php (the endpoint that is responsib…	CRITICAL	9.8	1.14%	Dec 24, 2020
CVE-2020-35675	BigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to move the records of members across groups. The applicable end…	HIGH	8.8	0.46%	Dec 24, 2020
CVE-2020-35676	BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such,…	MEDIUM	6.1	0.76%	Dec 24, 2020
CVE-2020-35677	BigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML characters upon an administrator using admin/pageEditGroup.php to creat…	MEDIUM	4.8	0.33%	Dec 24, 2020
CVE-2020-6583	BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve…	MEDIUM	6.1	0.69%	Jan 8, 2020
CVE-2018-18587	BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.	MEDIUM	5.3	0.53%	Oct 23, 2018

Rows per page

Showing 1 to 23 CVEs · page 1