CVE-2023-7097

A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown part of the file /addbill.php. The manipulation of the argument owners_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-248949 was assigned to this vulnerability.

• CWE-89
• CWE-89

• https://github.com/Glunko/vulnerability/blob/main/Water-Billing-System_sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.248949Permissions Required, Third Party Advisory
• https://vuldb.com/?id.248949Third Party Advisory
• https://github.com/Glunko/vulnerability/blob/main/Water-Billing-System_sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.248949Permissions Required, Third Party Advisory
• https://vuldb.com/?id.248949Third Party Advisory

Published

Dec 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7091A vulnerability was found in Dreamer CMS 4.1.3. It has been …8.8
• CVE-2023-7092A vulnerability was found in Uniway UW-302VP 2.0. It has bee…4.3
• CVE-2023-7093A vulnerability classified as critical has been found in Kyl…7.8
• CVE-2023-7094A vulnerability classified as problematic was found in Neten…7.5
• CVE-2023-7095A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-7096A flaw has been found in code-projects Faculty Management Sy…9.8
• CVE-2023-7098** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…5.3
• CVE-2023-7099A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-7100A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-7101Spreadsheet::ParseExcel version 0.65 is a Perl module used f…7.8
• CVE-2023-7102Use of a Third Party library produced a vulnerability in Bar…9.8
• CVE-2023-7103Authentication Bypass by Primary Weakness vulnerability in Z…9.8