PoC Index85,092 CVEs with PoCs

CVE-2026-5031

BichitroGan ISP Billing Software Endpoint users-view resource injection

LOW 2.1EPSS 0.4%

A vulnerability was found in BichitroGan ISP Billing Software 2025.3.20. Impacted is an unknown function of the file /?_route=settings/users-view/ of the component Endpoint. The manipulation of the argument ID results in improper control of resource identifiers. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected
BichitroGan · ISP Billing Software
CVSS v4.0 VULDB
2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB
4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v2.0 VULDB
4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
EPSS
0.38% chance of exploitation in the next 30 days, 30th percentile
Published
2026-03-29
Updated
2026-04-01

Proof-of-concept exploits (1)

References

Related