CVE-2022-40118: Improper Neutralization of Special Elements used in an SQL Command

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/sendfundsaction.php...