Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-83612
HistoryMar 25, 2022 - 12:00 a.m.

Money Transfer Management System SQL Injection Vulnerability (CNVD-2022-83612)

2022-03-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
money transfer management system
sql injection
validation
illegal commands
database theft

EPSS

0.001

Percentile

24.8%

Money Transfer Management System is a remittance management system. version 1.0 of Money Transfer Management System is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the id parameter of mtms/admin/?page=transaction/view_details. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.001

Percentile

24.8%

Related for CNVD-2022-83612