3 matches found
PT-2022-19813
Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns SQL Injection via the "/mtms/classes/Users.php?f=delete" API endpoint. This allows for potential manipulation of database queries. Recommendations For Money Transfer...
PT-2022-19812
Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "Master.php" file, specifically through the f parameter set to delete transaction, which is located at the...
CVE-2022-29746: Improper Neutralization of Special Elements used in an SQL Command
Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete...