Microfinance Management System 1.0 SQL Injection

Exploit Title: Microfinance Management System 1.0 - 'customernumber' SQLi Date: 2022-25-03 Exploit Author: Eren Gozaydin Vendor Homepage: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Software Link:...

Microfinance Management System 1.0 - (customer_number) SQL injection Vulnerability

Exploit Title: Microfinance Management System 1.0 - 'customernumber' SQLi Exploit Author: Eren Gozaydin Vendor Homepage: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/mims0.zip...

CVE-2022-27927

The Microfinance Management System 1.0 is vulnerable to SQL injection when using a MySQL database. The flaw exists in the course_code and/or customer_number parameters, specifically allowing an attacker to issue arbitrary SQL commands via the /mims/updatecustomer.php endpoint. Successful exploita...