CVE-2018-11443

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.

• CWE-79

• https://gist.github.com/NinjaXshell/be613dab99601f6abce884f6bc3d83a8Third Party Advisory
• https://www.exploit-db.com/exploits/44764/Exploit, Third Party Advisory, VDB Entry
• https://gist.github.com/NinjaXshell/be613dab99601f6abce884f6bc3d83a8Third Party Advisory
• https://www.exploit-db.com/exploits/44764/Exploit, Third Party Advisory, VDB Entry

Published

May 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11437The mobi_reconstruct_parts function in parse_rawml.c in Libm…
• CVE-2018-11438The mobi_decompress_lz77 function in compression.c in Libmob…
• CVE-2018-11439The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cp…6.5
• CVE-2018-1144A remote unauthenticated user can execute commands as root i…
• CVE-2018-11440Liblouis 3.5.0 has a stack-based Buffer Overflow in the func…
• CVE-2018-11442A CSRF issue was discovered in EasyService Billing 1.0, whic…
• CVE-2018-11444A SQL Injection issue was observed in the parameter "q" in j…
• CVE-2018-11445A CSRF issue was discovered on the User Add/System Settings …
• CVE-2018-11446The buy function of a smart contract implementation for Gold…
• CVE-2018-11447A vulnerability has been identified in SCALANCE M875 (All ve…
• CVE-2018-11448A vulnerability has been identified in SCALANCE M875 (All ve…
• CVE-2018-11449A vulnerability has been identified in SCALANCE M875 (All ve…