364 matches found
CVE-2023-5693
Summary: CVE-2023-5693 concerns CodeAstro Internet Banking System 1.0, where the parameter email in the file pages_reset_pwd.php enables SQL injection. The issue is remotely exploitable and, per sources, the exploit has been disclosed publicly. Affected software: CodeAstro Internet Banking System...
CodeAstro Internet Banking System Cross-Site Scripting Vulnerability
CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A security vulnerability exists in CodeAstro Internet Banking System version 1.0, which originates from a cross-site scripting XSS vulnerability in the parameter accountnumber of the file pagestransfermony.php...
CVE-2023-5699: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in CodeAstro Internet Banking System 1.0. This issue affects some unknown processing of the file pagesviewclient.php. The manipulation of the argument accname with the input Johnnie Reyes'"&% leads to cross site scripting. The...
CodeAstro Internet Banking System Cross-Site Scripting Vulnerability
CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A cross-site scripting vulnerability exists in CodeAstro Internet Banking System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameter accname in the file pagesviewclient.php...
PT-2023-32271 · Unknown · Codeastro Internet Banking System
Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A problematic issue was found in the CodeAstro Internet Banking System, affecting the file pages deposit money.php. The manipulation of the account number argument with a specific inp...
CVE-2023-5696: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file pagestransfermoney.php. The manipulation of the argument accountnumber with the input 357146928--...
CVE-2023-5694: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function of the file pagessystemsettings.php. The manipulation of the argument sysname with the input leads to cross site scripting. It is possible to launch the attac...
CVE-2023-5693: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pagesresetpwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...
CodeAstro Internet Banking System Cross-Site Scripting Vulnerability
CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A cross-site scripting vulnerability exists in CodeAstro Internet Banking System version 1.0, which originates from a cross-site scripting XSS vulnerability in the parameter accountnumber in the file...
CVE-2023-5698: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. This vulnerability affects unknown code of the file pagesdepositmoney.php. The manipulation of the argument accountnumber with the input 421873905--...
CVE-2023-5697: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pageswithdrawmoney.php. The manipulation of the argument accountnumber with the input 287359614--...
CVE-2023-5695: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pagesresetpwd.php. The manipulation of the argument email with the input testing%40example.com'%26%25 leads to cross site...
Online Banking System SQL Injection Vulnerability (CNVD-2022-68372)
Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that originates in the searchterm parameter in the /net-banking/customertransactions.php location. term parameter in /net-banking/customertransactions.php ha...
Online Banking System SQL Injection Vulnerability (CNVD-2022-68373)
Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System contains a security vulnerability that originates in the searchterm parameter in the /net-banking/transactions.php location. injection issue in the searchterm parameter at...
Online Banking System SQL Injection Vulnerability (CNVD-2022-68375)
Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that originates from an SQL injection in the custid parameter of the /net-banking/deletecustomer.php location. issue. No details of the vulnerability are...
CVE-2022-40116
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php...
CVE-2022-40121
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/managecustomers.php...
CVE-2022-40117
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletecustomer.php...
