CVE-2025-29017

CVE-2025-29017 - 인터넷 뱅킹 시스템 2.0.0 프로필 사진 업로드를 통한 원격 코드 실행 설명 Code Astro Internet Banking System 2.0.0 에서 pagesviewclient.php의 profilepic 매개변수에 대한 파일 업로드 검증 부재 로 인해 원격 코드 실행RCE 취약점이 존재합니다. 공격자는 업로드 요청을 수정하여 보안 검사를 우회하고 임의 코드 실행 을 유발할 수 있습니다. 영향을 받는 구성 요소 pagesviewclient.php의 profilepic 매개변수 업로드 기능...

CVE-2025-29015

CVE-2025-29015 - Internet Banking System 2.0.0의 pagesaccount.php 저장형 XSS 설명 Code Astro Internet Banking System 2.0.0 의 /admin/pagesaccount.php에서 name 매개변수를 통해 저장형 크로스 사이트 스크립팅XSS 취약점이 존재합니다. 악성 JavaScript 코드가 시스템에 주입되어 저장되며, 관리자가 해당 페이지를 볼 때 실행됩니다. 이로 인해 세션 하이재킹 및 기타 클라이언트 측 공격이 발생할 수 있습니다. 영향을 받...

CVE-2025-29018

CVE-2025-29018 - Internet Banking System 2.0.0의 pagesaddacctype.php 저장형 XSS 설명 Code Astro Internet Banking System 2.0.0 에는 pagesaddacctype.php의 name 매개변수에 대한 입력값 정화sanitization 부재 로 인해 저장형 교차 사이트 스크립팅XSS 취약점이 존재합니다. 공격자는 페이지가 로드될 때마다 실행되는 악성 JavaScript를 저장할 수 있습니다. 영향을 받는 구성 요소 pagesaddacctype.ph...

CVE-2025-14221

설명 1. CVE-2025-14221 2. 발견자: Fatma Trabelsi 3. 제품 공급업체: SourceCodester 4. 영향을 받는 제품: Online Banking System 1.0 POC 응용 프로그램의 사용자 프로필 업데이트 기능에 저장형 XSS크로스 사이트 스크립팅 취약점이 존재합니다. 응용 프로그램은 사용자가 이름 입력란에 제공한 입력을 데이터베이스에 저장하고 여러 페이지에서 렌더링하기 전에 적절히 처리하지 못합니다. 공격자는 이름 입력란에 임의의 JavaScript 코드를 주입할 수 있으며, 이 코드는...

secure-banking-app

secure-banking-app...

MOSK CBS Platform SQL注入漏洞

MOSK CBS Platform is a core banking system developed by MOSK Corporation. Versions of MOSK CBS Platform from 09062026 onward contain SQL injection vulnerabilities. These vulnerabilities stem from improper handling of special elements within SQL commands, which can lead to SQL injections...

The vulnerability of the Relationship Pricing component in the Oracle FLEXCUBE Universal Banking system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Relationship Pricing component in the Oracle FLEXCUBE Universal Banking banking service system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected informatio...

CVE-2022-26645

A remote code execution RCE vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function...

CVE-2022-26644

Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...

CVE-2022-27991

Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /stafflogin.php via the Staff ID and Staff Password parameters...

Exploit for Cross-site Scripting in Oretnom23 Banking_System

Description 1. CVE-2025-14221 2. Discoverer: Fatma Trabelsi 3...

CVE-2025-14221

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2025-14221

CVE-2025-14221 affects SourceCodester Online Banking System 1.0. The vulnerability is a Cross-Site Scripting (XSS) issue in the user profile page, arising from unsanitized input in the First Name/Last Name fields processed by the /?page=user endpoint. Public exploit code indicates a stored XSS va...

CVE-2025-14221: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

SourceCodester Online Banking System 代码注入漏洞

SourceCodester Online Banking System is a SourceCodester open source online banking system. A code injection vulnerability exists in version 1.0 of the SourceCodester Online Banking System, which originates from the incorrect manipulation of the parameter First Name/Last Name in the file...

CVE-2025-13276

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The...

EUVD-2025-197780

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The...

CVE-2025-13276

CVE-2025-13276 affects g33kyrash Online-Banking-System. The vulnerability is a SQL injection in the /index.php file caused by manipulating the Username parameter. It is remotely exploitable and has public exploit code. Version details for affected and updated releases are not available due to rol...

CVE-2025-13276: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The...

PT-2025-47138

Name of the Vulnerable Software and Affected Versions g33kyrash Online-Banking-System affected versions not specified Description A SQL injection issue exists due to the manipulation of the Username argument. The issue affects unknown code within the /index.php file and is remotely exploitable. T...