2 matches found
CVE-2022-29746: Improper Neutralization of Special Elements used in an SQL Command
Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete...
9.8CVSS8.3AI score0.01141EPSS
SaveExploits1References2
PT-2022-19813
Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns SQL Injection via the "/mtms/classes/Users.php?f=delete" API endpoint. This allows for potential manipulation of database queries. Recommendations For Money Transfer...
9.8CVSS0.01141EPSS
SaveExploits1References4
20