CVE-2022-29738: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id...

CVE-2022-25223: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/viewdetails' via the 'id' parameter...