CVE-2022-29746

CVE-2022-29746 affects Money Transfer Management System 1.0 and is exploitable via SQL injection at /mtms/classes/Users.php?f=delete. Connected sources consistently identify a SQL injection vulnerability in that endpoint, with NVD reporting CVSS2/7.5 (HIGH) and CVSS3.1/9.8 (CRITICAL). The affecte...