398 matches found
Sql injection
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomer.php...
Sql injection
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletebeneficiary.php...
Sql injection
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/sendfundsaction.php...
Sql injection
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomeraction.php...
Sql injection
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the searchterm parameter at /net-banking/transactions.php...
Sql injection
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletecustomer.php...
Sql injection
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/managecustomers.php...
Sql injection
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the searchterm parameter at /net-banking/customertransactions.php...
Sql injection
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php...
CVE-2022-40122
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomeraction.php...
CVE-2022-40122
CVE-2022-40122 affects Online Banking System v1.0. A SQL injection vulnerability exists in the cust_id parameter of /net-banking/edit_customer_action.php (SQLi via cust_id). The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, no authentication, and no user interaction required; impact ...
CVE-2022-40120
CVE-2022-40120 affects Online Banking System v1.0. The vulnerability is a SQL injection in the search_term parameter of /net-banking/customer_transactions.php. Root cause: unsanitized input used in SQL queries. Impact (per CVSS v3.1): Confidentiality HIGH, Integrity HIGH, Availability HIGH (score...
CVE-2022-40120
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the searchterm parameter at /net-banking/customertransactions.php...
CVE-2022-40121
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/managecustomers.php...
CVE-2022-40120
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the searchterm parameter at /net-banking/customertransactions.php...
CVE-2022-40121
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/managecustomers.php...
CVE-2022-40121
CVE-2022-40121 affects Online Banking System v1.0. The vulnerability is a SQL injection in the search parameter of /net-banking/manage_customers.php. This aligns with the CVSS/impact data shown (AV:N, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H) giving a base score of 9.8 (CRITICAL). The connected PT-20...
CVE-2022-40119
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the searchterm parameter at /net-banking/transactions.php...