CVE-2022-40114: Improper Neutralization of Special Elements used in an SQL Command

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomer.php...

CVE-2022-40118: Improper Neutralization of Special Elements used in an SQL Command

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/sendfundsaction.php...

CVE-2022-40117: Improper Neutralization of Special Elements used in an SQL Command

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/deletecustomer.php...

CVE-2022-40116: Improper Neutralization of Special Elements used in an SQL Command

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php...

PT-2022-25225 · Unknown · Online Banking System

Name of the Vulnerable Software and Affected Versions: Online Banking System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the search parameter at the "/net-banking/manage customers.php" API endpoint. Recommendations: For...

Online Banking System SQL Injection Vulnerability (CNVD-2022-71426)

Online Banking System is a simple banking system project used to manage bank customers' accounts and process basic customer transactions. A SQL injection vulnerability exists in Online Banking System, which stems from the lack of filtering and transfer of SQL data in the employee ID and employee...

CVE-2022-27991

Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /stafflogin.php via the Staff ID and Staff Password parameters...

CVE-2022-27991

Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /stafflogin.php via the Staff ID and Staff Password parameters...

CVE-2022-27991

CVE-2022-27991 affects the Online Banking System in PHP v1. The connected documents confirm multiple SQL injection vulnerabilities in the /staff_login.php endpoint, exploitable through the Staff ID and Staff Password parameters. The root cause is improper handling/validation of input used in SQL ...

PT-2022-18737

Name of the Vulnerable Software and Affected Versions Online Banking System in PHP version 1 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/staff login.php" endpoint via the Staff ID and Staff Password parameters. Recommendations...

CVE-2022-27991: Improper Neutralization of Special Elements used in an SQL Command

Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /stafflogin.php via the Staff ID and Staff Password parameters...

Banking System SQL注入漏洞

Online Banking System is a simple banking system project used to manage bank customers' accounts and process basic customer transactions. A SQL injection vulnerability exists in Online Banking System, which stems from the lack of filtering and transfer of SQL data in the employee ID and employee...

SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts

A server-side request forgery SSRF flaw in an API of a large financial technology fintech platform potentially could have compromised millions of bank customers, allowing attackers to defraud clients by controlling their bank accounts and funds, researchers have found. A team at Salt Security’s...

CVE-2022-28116

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2022-28116

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2022-28116

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

Sql injection

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2022-28116

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2022-28116

CVE-2022-28116 affects Online Banking System v1.0. The issue is a SQL injection via the id parameter, described in the CVE entry. CVSS v3.1 reports a base score of 9.8 (CRITICAL) with network attack, no privileges, and no user interaction required, impacting confidentiality, integrity, and availa...

PT-2022-18821

Name of the Vulnerable Software and Affected Versions Online Banking System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter. Recommendations For Online Banking System version 1.0, consider restricting access t...