398 matches found
CVE-2022-28116: Improper Neutralization of Special Elements used in an SQL Command
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...
Banking System SQL注入漏洞
Banking System is a simple banking system project by Carlo Montero's personal developer. It is used to manage bank customers' accounts and process their basic transactions. Online Banking System v1.0 has a security vulnerability that allows an attacker to perform SQL injection via the id paramete...
CVE-2022-26644
Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...
CVE-2022-26645
A remote code execution RCE vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function...
CVE-2022-26644
Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...
CVE-2022-26646
Online Banking System Protect v1.0 was discovered to contain a local file inclusion LFI vulnerability via the pages parameter...
CVE-2022-26646
Online Banking System Protect v1.0 was discovered to contain a local file inclusion LFI vulnerability via the pages parameter...
CVE-2022-26645
A remote code execution RCE vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function...
CVE-2022-26644
Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...
Remote code execution
A remote code execution RCE vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function...
Design/Logic Flaw
Online Banking System Protect v1.0 was discovered to contain a local file inclusion LFI vulnerability via the pages parameter...
CVE-2022-26644
The CVE-2022-26644 entry concerns Online Banking System Protect v1.0 with multiple cross-site scripting (XSS) flaws exploitable through parameters on user profile, system_info, and accounts management. This is documented across multiple sources (NVD/Red Hat and PT Security). Root cause is XSS in ...
CVE-2022-26644
Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via parameters on user profile, systeminfo and accounts management...
CVE-2022-26646
CVE-2022-26646 affects Online Banking System Protect v1.0 via a local file inclusion (LFI) vulnerability driven by the pages parameter. Several connected sources confirm an unauthenticated LFI that can read internal PHP files and, per an exploit reference, enable privilege escalation from a null ...
CVE-2022-26645
A remote code execution RCE vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function...
CVE-2022-26645
CVE-2022-26645 affects Online Banking System Protect v1.0. The Red Hat entry and other corroborating sources describe a remote code execution via a crafted PHP file uploaded through the Upload Image function, enabling arbitrary code execution on the server. Documented impact is high/severe (RCE) ...
PT-2022-17976
Name of the Vulnerable Software and Affected Versions Online Banking System Protect version 1.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are accessible via parameters on the user profile, system info, and accounts management pages...
PT-2022-17978
Name of the Vulnerable Software and Affected Versions Online Banking System Protect version 1.0 Description The issue is related to a local file inclusion LFI vulnerability. This vulnerability can be exploited via the pages parameter. Recommendations For Online Banking System Protect version 1.0,...
PT-2022-17977
Name of the Vulnerable Software and Affected Versions Online Banking System Protect version 1.0 Description A remote code execution issue allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function. Recommendations For Online Banking System Protect...