Tikket1

**Name of the Vulnerable Software and Affected Versions** FOSSBilling versions 0.6.0 through 0.7.2 **Description** A SQL injection issue exists in the `Massmailer` module filter functionality. An authenticated administrator can provide crafted filter values during the update of a mass email message, which allows untrusted input to be interpolated directly into the SQL recipient selection query. **Recommendations** Update to version 0.8.0. Restrict administrator access to trusted users only. Disable the `Massmailer` module if it is not required. Audit existing records in the `mod massmailer` table for suspicious filter values. Review administrator activity related to `Massmailer` message updates.

**Name of the Vulnerable Software and Affected Versions** FOSSBilling versions prior to 0.8.0 **Description** The Guest API 'invoice/update' endpoint lacks an authorization check. This allows an unauthenticated user who possesses an invoice hash to modify the payment gateway of an unpaid invoice by changing the `gateway id` variable to any payment gateway already configured in the system. Invoice hashes may be exposed through email links, referrer headers, or shared URLs. The impact is limited by the `invoice accessible from hash` system setting and the requirement that the gateway must be pre-installed by an administrator. **Recommendations** Update to version 0.8.0.

**Name of the Vulnerable Software and Affected Versions** Coolify versions prior to 4.0.0-beta.471 **Description** Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Server and project lookups are not scoped to the current team, which allows any authenticated user to access servers and projects belonging to other teams by specifying their IDs directly. **Recommendations** Update to version 4.0.0-beta.471.

Name of the Vulnerable Software and Affected Versions Hi.Events versions 0.8.0-beta.1 through 1.7.1-beta Description Hi.Events is an open-source event management and ticket selling platform. Multiple repository classes pass the user-supplied `sort by` query parameter directly to Eloquent's `orderBy()` without validation, enabling SQL injection. The application uses PostgreSQL which supports stacked queries. Recommendations Update to version 1.7.1-beta or later.