CVE-2025-29015

CVE-2025-29015 - Système bancaire en ligne 2.0.0 - XSS stocké dans pagesaccount.php Description Une vulnérabilité de Cross-Site Scripting XSS stocké existe dans Code Astro Internet Banking System 2.0.0 via le paramètre name dans /admin/pagesaccount.php. Du code JavaScript malveillant peut être...

CVE-2025-29018

CVE-2025-29018 - Internet Banking System 2.0.0 में pagesaddacctype.php में Stored XSS विवरण Code Astro Internet Banking System 2.0.0 में pagesaddacctype.php के name पैरामीटर में अस्वच्छ unsanitized इनपुट के कारण Stored Cross-Site Scripting XSS भेद्यता मौजूद है। हमलावर दुर्भावनापूर्ण जावास्क्रिप्ट...

CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 में प्रोफ़ाइल चित्र अपलोड के माध्यम से रिमोट कोड निष्पादन विवरण Code Astro Internet Banking System 2.0.0 में अनुचित फ़ाइल अपलोड सत्यापन के कारण रिमोट कोड निष्पादन RCE भेद्यता मौजूद है, जो pagesviewclient.php के भीतर profilepic पैरामीटर में है। हमलावर...

CVE-2025-14221

विवरण 1. CVE-2025-14221 2. खोजकर्ता: Fatma Trabelsi 3. उत्पाद विक्रेता: SourceCodester 4. प्रभावित उत्पाद: Online Banking System 1.0 POC एक संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी एप्लिकेशन के उपयोगकर्ता प्रोफ़ाइल अपडेट कार्यक्षमता में मौजूद है। एप्लिकेशन डेटाबेस में संग्रहीत करने और कई पृष्ठ...

secure-banking-app

secure-banking-app...

MOSK CBS Platform SQL注入漏洞

MOSK CBS Platform is a core banking system developed by MOSK Corporation. Versions of MOSK CBS Platform from 09062026 onward contain SQL injection vulnerabilities. These vulnerabilities stem from improper handling of special elements within SQL commands, which can lead to SQL injections...

CVE-2022-26645

A remote code execution RCE vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function...

CVE-2022-26644

Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...

CVE-2022-27991

Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /stafflogin.php via the Staff ID and Staff Password parameters...

Exploit for Cross-site Scripting in Oretnom23 Banking_System

Description 1. CVE-2025-14221 2. Discoverer: Fatma Trabelsi 3...

CVE-2025-14221

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2025-14221

CVE-2025-14221 affects SourceCodester Online Banking System 1.0. The vulnerability is a Cross-Site Scripting (XSS) issue in the user profile page, arising from unsanitized input in the First Name/Last Name fields processed by the /?page=user endpoint. Public exploit code indicates a stored XSS va...

SourceCodester Online Banking System 代码注入漏洞

SourceCodester Online Banking System is a SourceCodester open source online banking system. A code injection vulnerability exists in version 1.0 of the SourceCodester Online Banking System, which originates from the incorrect manipulation of the parameter First Name/Last Name in the file...

CVE-2025-13276

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The...

CVE-2025-13276

CVE-2025-13276 affects g33kyrash Online-Banking-System. The vulnerability is a SQL injection in the /index.php file caused by manipulating the Username parameter. It is remotely exploitable and has public exploit code. Version details for affected and updated releases are not available due to rol...

EUVD-2025-197780

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The...

PT-2025-47138

Name of the Vulnerable Software and Affected Versions g33kyrash Online-Banking-System affected versions not specified Description A SQL injection issue exists due to the manipulation of the Username argument. The issue affects unknown code within the /index.php file and is remotely exploitable. T...

CVE-2025-13119

A flaw has been found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been published and may be used...

EUVD-2025-175309

A flaw has been found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2025-13119 Fabian Ros/SourceCodester Simple E-Banking System cross-site request forgery

A flaw has been found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been published and may be used...