CVE-2022-1083

The CVE-2022-1083 entry affects Microfinance Management System and is supported by multiple connected records describing a SQL injection vulnerability. The root cause is lack of validation/escaping for external input in parameters: customer_type_number, account_number, account_status_number, and ...

CVE-2022-1082 SourceCodester Microfinance Management System Login Page login.php sql injection

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

CVE-2022-1082 SourceCodester Microfinance Management System Login Page login.php sql injection

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1 leads to sql injection. The attack may be initiate...

CVE-2022-1082

CVE-2022-1082 affects SourceCodester Microfinance Management System 1.0, specifically the login page file /mims/login.php. The vulnerability is a SQL injection caused by manipulation of the username/password input using the payload '||1=1#', which may be exploited remotely. The issue has been des...

CVE-2022-1081 SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument firstname, middlename, and surname leads to cross site scripting. The attack...

CVE-2022-1081 SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument firstname, middlename, and surname leads to cross site scripting. The attack...

CVE-2022-1081

The CVE-2022-1081 entry concerns SourceCodester Microfinance Management System 1.0. A cross-site scripting vulnerability exists in /mims/app/addcustomerHandler.php, caused by improper handling of first_name, middle_name, and surname inputs. The issue allows remote initiation of an XSS attack, wit...

Microfinance Management System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Microfinance Management System 1.0 - Cross-site scripting stored unauthenticated Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Version: 1.0 Tested on: Linux Title: ================ Microfinance Management System...

SourceCodester Microfinance Management System 跨站脚本漏洞

SourceCodester Microfinance Management System is an application of SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Microfinance Management System version 1.0, which stems from The program lacks data validation filters for user-supplied data and output, which can...

Microfinance Management System 1.0 SQL Injection Vulnerability

Microfinance Management System version suffers from multiple remote SQL injection vulnerabilities including one that allows for authentication bypass. Original discovery of SQL injection in this version is attributed to Hejap Zairy in March of 2022. Exploit Title: Microfinance Management System 1...

Microfinance Management System 1.0 Cross Site Scripting

Exploit Title: Microfinance Management System 1.0 - Cross-site scripting stored unauthenticated Date: 23/03/2022 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Version: 1.0 Tested on: Linux Title: ================ Microfinance...

Microfinance Management System 1.0 SQL Injection

Exploit Title: Microfinance Management System 1.0 - Authentication Bypass SQL Injection Date: 23/03/2022 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Version: 1.0 Tested on: Linux Title: ================ Microfinance Managemen...